Tag

Upnp

3 briefs RSS

CVE-2026-27916 Use-After-Free in Windows UPnP Device Host

CVE-2026-27916 is a use-after-free vulnerability in Windows Universal Plug and Play (UPnP) Device Host that allows an authorized attacker to elevate privileges locally.

windows upnp privilege-escalation cve-2026-27916

2r 1t 1c 1i 2w ago

high advisory

CVE-2026-32156 Use-After-Free Vulnerability in Windows UPnP Device Host

2 rules 2 TTPs 1 CVE 1 IOC

CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host service that allows an unauthorized attacker to execute code locally.

use-after-free windows upnp code-execution

2r 2t 1c 1i 2w ago

critical advisory

Critical Command Injection Vulnerability in Zyxel Routers (CVE-2026-13942)

2 rules 1 TTP

A critical command injection vulnerability (CVE-2026-13942) in the UPnP function of Zyxel routers allows remote attackers to execute arbitrary operating system commands by sending crafted UPnP SOAP requests.

zyxel router command injection cve-2026-13942 upnp

2r 1t Feb 27, 2026