CVE-2026-44071: Netatalk

Low severity, CVSS 3.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of service via memory errors that would otherwise be caught and safely terminated by runtime protection.

Affected products

• Netatalk Netatalk: from 3.1.2, up to and including 4.4.2

Published 2026-05-21. Last modified 2026-07-23.