CVE-2022-26505: Debian Linux

High severity, CVSS 7.4. EPSS: 1.6% chance of exploitation in the next 30 days.

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.

Affected products

• Debian Debian Linux: version 9.0 only
• Readymedia Project Readymedia: before 1.3.1 (fixed in 1.3.1)

Published 2022-03-06. Last modified 2026-06-17.