CVE Catalog
CVE-2026-44050
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.42%
34th percentile - higher than 34% of all known CVEs
Summary
A heap-based buffer overflow in the CNID daemon in Netatalk (versions 2.0.0-4.4.2) allows a remote authenticated attacker to execute arbitrary code with elevated privileges or cause a denial of service.
Risk Assessment
The organization is at risk of server compromise (AFP) and potential full system takeover, as well as service disruptions.
Recommendation
Update Netatalk to version 4.4.3 or later. Restrict AFP service access to trusted users and networks only.
Original NVD description (English source)
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.