CVE-2021-31718

—

CVSS 3.1

8.8 high

EPSS

<1%p59

Published

Apr 25, 2021 (Apr 25, 2021)

Modified

Jun 17, 2026

Description

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

Vendors: npupnp project
Products: npupnp
Weakness: CWE-346
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.