CVE Catalog
CVE-2026-44063
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
Netatalk versions 2.1.0 through 4.4.2 contain an LDAP injection vulnerability. A remote authenticated attacker can manipulate LDAP queries, obtaining limited information or modifying LDAP entries via crafted filter input.
Risk Assessment
An attacker can gain unauthorized access to or modify LDAP data, potentially leading to confidentiality and integrity breaches.
Recommendation
Update Netatalk to version 4.4.3 or later if available.
Original NVD description (English source)
An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input.