CVE-2026-44050

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-44050
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.

9.9 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://netatalk.io/security/CVE-2026-44050
Configurations

No configuration.

History

21 May 2026, 09:16

Type Values Removed Values Added
Summary (en) In Netatalk 2.0.0 through 4.4.2, heap buffer overflow in cnid daemon comm_rcv(). Fixed in 4.4.3. (en) A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.

21 May 2026, 08:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-21 08:16

Updated : 2026-05-21 15:20

NVD link : CVE-2026-44050

Mitre link : CVE-2026-44050

CVE.ORG link : CVE-2026-44050

JSON object : View

Products Affected

No product.

CWE
CWE-122

Heap-based Buffer Overflow