CVE-2026-57487 | pupnp up to 2.0.1 HTTP Parser httpreadwrite.c http_RecvMessage content_length resource consumption

October 16, 2026 Yanac

A vulnerability was found in pupnp up to 2.0.1. It has been classified as problematic. The impacted element is the function http_RecvMessage of the file upnp/src/genlib/net/http/httpreadwrite.c of the component HTTP Parser. The manipulation of the argument content_length leads to resource consumption.

This vulnerability is uniquely identified as CVE-2026-57487. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More