EUVD-2026-22595

Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

CVE-2026-32212

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

CVE-2026-32212

CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...