CVE-2026-44073

—

CVSS 3.1

5.0 medium

EPSS

<1%p20

Published

May 21, 2026 (May 21, 2026)

Modified

Jul 23, 2026

Description

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.

Weakness: CWE-273
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.