CVE-2026-76650 Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

CVE-2026-76650

CVE-2026-76650 is a NULL pointer dereference in the UPnP service of TP-Link TL-WR841N v14 , triggered by a specially crafted SOAP state variable query request . Successful exploitation causes the UPnP process to terminate or become unstable, resulting in a denial-of-service affecting UPnP discove...

CVE-2026-76650 Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

CVE-2026-76649 Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-7069

CVE-2026-7069 affects D-Link DIR-825 (up to firmware 3.00b32) via the miniupnpd file and its AddPortMapping function in upnpsoap.c. A buffer overflow is triggered by manipulating the NewPortMappingDescription argument, with the attack executable over the local network. Public exploit activity is ...

Remote code execution

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server including UPnP SOAP and GENA endpoints, leading to remote code execution...

CVE-2021-31718

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server including UPnP SOAP and GENA endpoints, leading to remote code execution...

CVE-2021-31718

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server including UPnP SOAP and GENA endpoints, leading to remote code execution...

PT-2021-19481

Name of the Vulnerable Software and Affected Versions npupnp versions prior to 4.1.4 Description The issue affects the embedded web server in npupnp, including UPnP SOAP and GENA endpoints, due to DNS rebinding. This can lead to remote code execution. Recommendations For versions prior to 4.1.4,...

CVE-2021-31718: Origin Validation Error

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server including UPnP SOAP and GENA endpoints, leading to remote code execution...

PT-2019-9261

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description The issue allows an attacker on the same network segment to execute arbitrary OS commands via the SOAP interface of UPnP. Recommendations For Aterm...

NEC Aterm WF1200CR and Aterm WG1200CR Operating System Command Injection Vulnerability

The NEC Aterm WF1200CR and Aterm WG1200CR are both router products from Nippon Electric NEC. An operating system command injection vulnerability exists in the SOAP interface of the 'UPnP' function in the NEC Aterm WF1200CR with firmware version 1.1.1 and earlier and the Aterm WG1200CR with firmwa...

PT-2018-13261

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 routers version 20.07 Description A cross-site scripting XSS issue allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an "AddPortMapping" UPnP SOAP request. Recommendations For...

TR-064 vulnerabilities to the affected vendors of equipment and TR-064 Protocol security analysis-vulnerability warning-the black bar safety net

! Author: British Xiphos Research, senior security researcher Darren Martyn Over the past few weeks, the embedded device demonstrated the security situation worrisome, in the Mirai early code is public, I think some of the“smart device”botnet will quickly spread, in addition to the telnet scannin...

D-Link Devices UPnP SOAP Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

D-Link Devices UPnP SOAP Telnetd Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link Devices UPnP SOAP Telnetd...

D-Link Devices UPnP SOAP Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link Devices UPnP SOAP Command...