CVE Catalog
CVE-2026-44073
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.
Risk Assessment
An attacker could escalate privileges, gaining unauthorized access to critical system resources.
Recommendation
Update Netatalk to version 4.4.3 or later, which includes a fix for checking the return value of seteuid().
Original NVD description (English source)
Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.