miniupnpd_poc

Miniupnpd path가 526바이트보다 큰 SUBSCRIBE 요청을 전송할 때 트리거됩니다. 근본 원인은 snprintf의 반환 값을 검증하지 않기 때문입니다. snprintf는 실제로 복사한 바이트 수가 아니라 복사할 수 있었던 바이트 수를 반환하기 때문입니다. 2019년 1월 25일 기준으로 이 repro에 포함된 PoC는 Google Wifi에서 성공적으로 테스트되었습니다. miniupnpd를 사용하는 다른 장치도 취약할 수 있습니다. 근본 원인 upnpevents.c static void...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : MiniUPnPd vulnerability (USN-8731-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8731-1 advisory. It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remo...

USN-8731-1 miniupnpd vulnerability

It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remote attacker could use this issue to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote...

USN-8731-1: MiniUPnPd vulnerability

It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remote attacker could use this issue to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote...

CVE-2026-75501

Rejected reason: Vendor could not replicate the vul, and reporter is unavailable to comment...

CVE-2026-75501

...

CVE-2026-75501

...

CVE-2026-75501

The Calix GS7 XGS (GS5239XG) residential router running EXOS firmware 6.6.47 exposes its MiniUPnPd WANIPConnection service on the public WAN interface at TCP port 5000 without authentication. Unauthenticated remote attackers can send crafted SOAP requests to add, delete, or enumerate NAT port map...

PT-2026-79389

Name of the Vulnerable Software and Affected Versions Calix EXOS firmware version 6.6.47 Description An issue in the Calix EXOS firmware for the GS7 XGS GS5239XG residential router allows unauthenticated remote attackers to modify NAT port-forwarding rules. The device exposes the MiniUPnPd contro...

CVE-2026-61875: Improper Neutralization of Input During Web Page Generation

luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers can send malicious HTML in the NewPortMappingDescription field, which miniupnpd stores and luci-app-upnp renders...

CVE-2026-10068

A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. Thi...

CVE-2026-7069

A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. The attack needs to be approached within...

CVE-2026-10069

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...

CVE-2026-10069

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...

CVE-2026-10068

A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. Thi...

EUVD-2026-33347

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...

CVE-2026-10069

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...

CVE-2026-10069 Shibby Tomato miniupnpd resource consumption

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...

CVE-2026-10069

CVE-2026-10069 affects Shibby Tomato 1.28, with the vulnerability in an unknown function of the file usr/sbin/miniupnpd that can be manipulated remotely to cause resource consumption. The impact is resource exhaustion (availability) on affected devices. The affected project is superseded by Fresh...

CVE-2026-10069 Shibby Tomato miniupnpd resource consumption

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...