Linuxsecurity Critical Integer Underflow Vulnerability in MiniUPnPd Affects Ubuntu Systems
Article Content
- •MiniUPnPd vulnerability allows remote denial of service or information disclosure.
- •Affected Ubuntu versions include 20.04 LTS to 26.04 LTS.
- •Users should update to the latest package versions to mitigate risks.
A significant integer underflow vulnerability has been identified in MiniUPnPd, affecting Ubuntu systems. This flaw allows remote attackers to exploit specially crafted SOAPAction headers to cause a denial of service or disclose sensitive information. The vulnerability is linked to the parsing of SOAPAction headers, where a single quote can trigger the issue. Systems running various versions of Ubuntu, including 20.04 LTS to 26.04 LTS, are impacted. Users are advised to update their systems to the latest package versions to mitigate the risk. The vulnerability has been assigned the identifier USN-8731-1. A standard system update will apply the necessary patches. The issue was disclosed on September 7, 2026, with no active exploitation reported yet.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…