Unverified50% confidenceCautionExact time
UPnP has serious security vulnerabilities due to its lack of an authentication mechanism; malware can exploit UPnP to open ports without the user's knowledge.
1
Sources
50%
Confidence
Long-term
Relevance
8/7/2026
First Seen
Sources
端口转发下Authentik安全性解析：自托管服务防护指南
Related Claims
Unverified2013年Rapid7研究员HD Moore发布的《Security Flaws in Universal Plug and Play》报告揭示了UPnP的系统性缺陷，包括libupnp和MiniUPnP库的远程代码执行漏洞69% similarUnverifiedRe-enabling UPnP in the case described caused the UGREEN NAS to autonomously expose HTTP, HTTPS, and SSH (port 22) to the public internet.69% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.67% similarUnverifiedImproperly configured MCP Servers can lead to security risks such as database password leakage, exposure of private files, and token theft.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/704273API
curl https://kongchang.com/api/v1/knowledge/claims/704273MCP
get_claim(id=704273)