Divide-by-Zero Vulnerability in MiniUPnPd Affects Local Network Security
CVE-2026-107159

7.1HIGH

Key Information:

Vendor

Miniupnp Project

Status
Miniupnpd
Vendor
CVE Published:
7 October 2026

What is CVE-2026-107159?

MiniUPnPd version 2.3.11 and earlier is susceptible to a divide-by-zero vulnerability found in the ProcessSSDPData() function. This flaw enables unauthenticated attackers within the local network to exploit the service's weak checks. By sending a crafted multicast M-SEARCH datagram targeting port 1900 with an MX value of 0 and a defined ST, the attackers can trigger a SIGFPE signal, leading to the daemon's crash and causing disruption of UPnP Internet Gateway Device (IGD) functionality.

Affected Version(s)

miniupnpd 0 <= 2.3.11

References

https://github.com/miniupnp/miniupnp/commit/8f13b7a5843f5...
patch
https://github.com/miniupnp/miniupnp
product
https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1...
technical-description

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

azuk4r
.