CVE-2026-44047
HighSummary
CVE-2026-44047 is an SQL injection vulnerability in the MySQL CNID backend in Netatalk versions 3.1.0 through 4.4.2. It allows a remote authenticated attacker to gain unauthorized access to data, modify data, or cause a denial of service.
Risk Assessment
The organization may be exposed to unauthorized data access and potential data modification, which could lead to serious consequences for the integrity and availability of the system.
Recommendation
It is recommended to update Netatalk to the latest version to mitigate this vulnerability and implement additional security measures such as access monitoring and security audits.
Original NVD description (English source)
An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, or cause a denial of service.