HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-58547 — Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an autho...

·Source: NIST NVD

Updated:

Executive Summary

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

Analysis

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally. CVSS Score: 5.5. Published: 2026-07-14T18:18:42.907.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58547
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 14, 2026. Verified by: NIST.

Related Threats

HIGHRansomware

German law enforcement claims to have ‘dismantled’ mega phishing-as-a-service group Kratos

A global law enforcement crackdown has seized infrastructure serving the massive phishing-as-a-service (PhaaS) group Kratos, as well resulting in the arrest of an unnamed Kratos “developer and technical administrator” in Indonesia. The effort was managed by German law enforcement and involved agencies from the US, Indonesia and other countries. Although a German statement claimed that the Kratos i

CSO Online
MEDIUMVulnerability

Instructure Incident Driving 58 Percent of Breach Notices in 2026

GovTech reports: The mega breach is back in 2026, according to a new report from the Identity Theft Resource Center (ITRC). The nonprofit group, which works to prevent and reduce incidences of identify theft, found that 1,029 data compromises generated 471 million breach notices in the first half of the year, with one incident —... Source

DataBreaches.net
LOWVulnerability

North Korean IT Worker Scams Fueling Ukrainian Invasion

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/north-korean-worker-scams-fueling-ukrainian-invasion-image_small-1-a-32306.jpg" align=right hspace=4><b>Leaked Payment Server Data Lets Researchers Trace Money Flows</b><br>Salaries paid to North Korean IT workers end up converted to ammunition used against Ukraine, warns new research based on a trove of leaked payment server data

Bank Info Security