CVE-2026-44051: Netatalk

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation.

Affected products

• Netatalk Netatalk: from 3.0.2, up to and including 4.4.2

Published 2026-05-21. Last modified 2026-07-23.