CVE-2026-44055

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-44055
A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://netatalk.io/security/CVE-2026-44055
Configurations

No configuration.

History

21 May 2026, 09:16

Type Values Removed Values Added
Summary (en) In Netatalk 3.1.4 through 4.4.2, bitwise or logic bug enables shell injection. Fixed in 4.4.3. (en) A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

21 May 2026, 08:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-21 08:16

Updated : 2026-05-21 15:20

NVD link : CVE-2026-44055

Mitre link : CVE-2026-44055

CVE.ORG link : CVE-2026-44055

JSON object : View

Products Affected

No product.

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')