CVE-2026-55862
Received Received - Intake

Stack Overflow in pupnp UPnP SDK XML Parsing

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: GitHub, Inc.

Description
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and ixmlNode_getElementsByTagNameRecursive, ixmlNode_getElementsByTagNameNSRecursive, ixmlNode_cloneNodeTreeRecursive, and ixmlNode_isAncestor in ixml/src/node.c recurse over firstChild and nextSibling links. An unauthenticated peer on the local network can supply deeply nested XML through a SOAP request, exhaust a service thread's stack, and crash the UPnP service. This is an incomplete-fix case for CVE-2021-28302 because its remediation converted ixmlNode_free but left these traversal paths recursive. This issue is fixed in 2.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-55862
EUVD
EUVD-2026-102927

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pupnp pupnp < 2.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-674 The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55862 is a stack overflow vulnerability in the pupnp library caused by unbounded recursion in multiple DOM traversal functions. These functions process deeply nested XML without depth limits, leading to excessive stack usage. An attacker on the local network can exploit this by sending a SOAP request with deeply nested XML, crashing the UPnP service.

Detection Guidance

To detect this vulnerability, monitor for crashes in UPnP services using pupnp versions <= 1.18.5 when processing SOAP requests. Check logs for SIGSEGV errors or stack overflows during XML parsing. Use network monitoring tools to inspect incoming SOAP requests for deeply nested XML structures.

Impact Analysis

This vulnerability allows an unauthenticated attacker on the same local network to crash UPnP services built with affected pupnp versions. The impact is a denial of service, particularly severe for embedded or IoT devices with limited thread stack sizes. The service disruption occurs without requiring privileges or user interaction.

Compliance Impact

This vulnerability primarily causes denial-of-service conditions by crashing UPnP services through stack overflows. It does not directly impact data confidentiality or integrity but may disrupt services handling sensitive data. Compliance with GDPR or HIPAA could be indirectly affected if service disruptions lead to unauthorized access or data processing delays, though no direct evidence of such impacts is provided.

Mitigation Strategies

Upgrade to pupnp version 2.0.0 or later to address the recursive DOM traversal issues. If upgrading is not immediately possible, implement a parser nesting depth limit (e.g., IXML_MAX_ELEMENT_DEPTH 256) to block deeply nested XML. Restrict network access to UPnP services to trusted local networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55862. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart