CVE-2021-31718: Npupnp Project Npupnp

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

Affected products

• Npupnp Project Npupnp: before 4.1.4 (fixed in 4.1.4)

Published 2021-04-25. Last modified 2026-06-17.