CVE-2026-44064: Netatalk

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of service via a crafted ASP request.

Affected products

• Netatalk Netatalk: from 1.3, up to and including 4.4.2

Published 2026-05-21. Last modified 2026-07-23.