CVE-2026-26828 | owntone-server up to 3d1652d DAAP src/httpd_daap.c daap_reply_playlists null pointer dereference

A vulnerability described as problematic has been identified in owntone-server up to 3d1652d. The impacted element is the function daap_reply_playlists of the file src/httpd_daap.c of the component DAAP Handler. Executing a manipulation can lead to null pointer dereference.

This vulnerability is handled as CVE-2026-26828. The attack can be executed remotely. There is not any exploit available.