CVE-2026-49180

A vulnerability in Universal Plug and Play (upnp.dll) allows an authorized attacker to exploit improper link resolution before file access, potentially leading to local information disclosure. Organizations utilizing UPnP services should prioritize this issue, as it could expose sensitive data to authenticated users. Implementing proper access controls and monitoring UPnP usage can help mitigate the risk associated with this vulnerability.