Skip to content
OpenAdvisories
High USN-8731-1 1 CVE

miniupnpd vulnerability

Published Sep 7, 2026 · Updated Sep 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that MiniUPnPd contained an integer underflow
vulnerability in SOAPAction header parsing. A remote attacker could
use this issue to cause a denial of service or information disclosure
by sending a malformed SOAPAction header with a single quote.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS miniupnpd 1.8.20140523-4.1+deb9u2ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS miniupnpd 2.0.20171212-2ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS miniupnpd 2.1-6.1ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS miniupnpd 2.2.3-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS miniupnpd 2.3.4-1ubuntu0.1~esm1
Ubuntu · Pro 26.04 LTS Pro:26.04:LTS miniupnpd 2.3.9-2ubuntu0.1~esm1

Vulnerabilities 1

  • High 7.1
    CVE-2026-5720

    miniupnpd Integer Underflow SOAPAction Header Parsing

    miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote. Attackers can trigger an out-o…

    miniupnp project miniupnpd miniupnpd miniupnpd Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-5720