cve.bz

CVE-2021-31718

8.8 highEPSS 1.0%

High (8.8) in npupnp project npupnp. EPSS 1.0% chance of exploitation in the next 30 days.

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE
CWE-346
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON