CVE-2026-44053

EUVD-2026-31232
Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
securinCNA
7.4 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 22.76%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
netatalknetatalk
1.5.0 ≤
𝑥
≤ 4.2.2
CNA
Debian logo
Debian Releases
Debian Product
Codename
netatalk
bullseye
vulnerable
bullseye (security)
vulnerable
forky
4.5.1~ds-1
fixed
sid
4.5.1~ds-1
fixed
trixie
no-dsa
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
netatalk
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
questing
ignored
resolute
ignored
trusty
ignored
Common Weakness Enumeration
References
https://netatalk.io/security/CVE-2026-44053