CVE-2026-5720 | miniupnp project miniupnpd up to 2.3.9 HTTP Request ParseHttpHeaders integer underflow

A vulnerability, which was classified as critical, has been found in miniupnp project miniupnpd up to 2.3.9. This affects the function ParseHttpHeaders of the component HTTP Request Handler. This manipulation causes integer underflow.

This vulnerability is registered as CVE-2026-5720. The attack requires access to the local network. No exploit is available.

It is advisable to upgrade the affected component.