{
  "cveId": "CVE-2026-41682",
  "url": "https://patchblox.com/security/cve/CVE-2026-41682",
  "summary": "CVE-2026-41682 is fixed in pupnp on 1 platform, first by DEBIAN-CVE-2026-41682, released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "pupnp: pupnp is an SDK for development of UPnP device and control point applications",
  "description": "pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.",
  "published": "2026-05-08T23:16:35Z",
  "severity": "",
  "epss": 0.00346,
  "epssPercentile": 0.28394,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "pupnp",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:1.14.20-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-41682",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-41682",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "pupnp",
      "release": "Debian 14",
      "fixedVersion": "1:1.14.31-1",
      "fix": "DEBIAN-CVE-2026-41682",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-41682",
      "released": "2026-05-15T16:01:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}