CVE-2026-44055 | THREATINT

Description

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

PUBLISHED Reserved 2026-05-05 | Published 2026-05-21 | Updated 2026-05-22 | Assigner securin

HIGH: 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

3.1.4 (semver)

affected

4.4.3 (semver)

unaffected

Credits

Arjun Basnet from Securin finder

References

netatalk.io/security/CVE-2026-44055 (Netatalk Security Advisory CVE-2026-44055) vendor-advisory

cve.org (CVE-2026-44055)

nvd.nist.gov (CVE-2026-44055)

Download JSON