CVE-2026-44063 | THREATINT

Description

An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input.

PUBLISHED Reserved 2026-05-05 | Published 2026-05-21 | Updated 2026-05-21 | Assigner securin

MEDIUM: 4.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Problem types

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Product status

Default status

unaffected

2.1.0 (semver)

affected

4.5.0 (semver)

unaffected

Credits

Arjun Basnet from Securin finder

References

netatalk.io/security/CVE-2026-44063 (Netatalk Security Advisory CVE-2026-44063) vendor-advisory

cve.org (CVE-2026-44063)

nvd.nist.gov (CVE-2026-44063)

Download JSON