Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Netatalk — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in Netatalk, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known security vulnerabilities associated with Netatalk, an open-source implementation of the Apple Filing Protocol designed for file sharing between Macintosh computers and Unix servers. It aggregates a comprehensive list of common weakness types identified in the software, ranging from remote code execution and buffer overflows to authentication bypasses and denial-of-service conditions. The collected data spans from the initial releases of the software through recent updates, ensuring that historical as well as contemporary security issues are documented. By reviewing this compilation, users and security professionals can effectively track vendor advisories and security notices issued by the Netatalk maintainers to stay informed about critical patches and mitigation strategies. Furthermore, this resource aids in understanding the specific risk profile of a particular weakness class within the context of network file sharing protocols. Readers can also look up a product's vulnerability history to analyze trends in software stability and the effectiveness of past security fixes. This centralized view supports risk assessment efforts by providing context on how different flaw types have impacted the product over time, helping administrators prioritize remediation efforts based on the severity and exploitability of the documented issues without relying on scattered external sources.

Vendor: Netatalk

CVE IDTitleCVSSSeverityPublished
CVE-2026-7837 TOCTOU with root privilege in ad_flush CWE-367 3.7 Low2026-05-21
CVE-2026-44075 Missing break in DSI OpenSession CWE-484 3.7 Low2026-05-21
CVE-2026-44074 Bitwise OR of errno values CWE-682 3.7 Low2026-05-21
CVE-2026-44071 FORTIFY_SOURCE disabled CWE-693 3.7 Low2026-05-21
CVE-2026-44057 Dead bounds check in Spotlight RPC unmarshaller CWE-561 3.1 Low2026-05-21
CVE-2026-7836 hextoint macro uppercase bug CWE-682 3.1 Low2026-05-21
CVE-2026-7835 Format string argument mismatch CWE-134 3.1 Low2026-05-21
CVE-2026-44076 Shell injection via volume path CWE-78 6.7 Medium2026-05-21
CVE-2026-44073 seteuid failure ignored in auth modules CWE-273 4.0 Medium2026-05-21
CVE-2026-44072 system() after failed chdir() CWE-78 2.5 Low2026-05-21
CVE-2026-44070 Unbounded realloc in charset conversion CWE-770 3.1 Low2026-05-21
CVE-2026-44069 Integer underflow in volxlate CWE-191 3.4 Low2026-05-21
CVE-2026-44068 EA path traversal via incomplete sanitization CWE-22 7.6 High2026-05-21
CVE-2026-44067 EA header parsing heap over-read CWE-125 3.7 Medium2026-05-21
CVE-2026-44066 Heap out-of-bounds reads in Spotlight RPC unmarshalling CWE-125 7.1 High2026-05-21
CVE-2026-44065 Off-by-two in papd lp_write() CWE-193 3.7 Medium2026-05-21
CVE-2026-44064 ASP session ID out-of-bounds access CWE-125 7.1 High2026-05-21
CVE-2026-44063 LDAP filter injection CWE-90 4.2 Medium2026-05-21
CVE-2026-44062 Missing o_len bounds check in pull_charset_flags() CWE-787 7.5 High2026-05-21
CVE-2026-44061 DES-ECB auth with timing side channel CWE-208 5.9 Medium2026-05-21
CVE-2026-44060 Integer underflow in dsi_writeinit() leads to denial of service CWE-191 7.5 High2026-05-21
CVE-2026-44059 Non-reentrant privilege toggle CWE-362 3.9 Medium2026-05-21
CVE-2026-44058 Authentication bypass via admin auth user CWE-287 6.4 High2026-05-21
CVE-2026-44056 Stack buffer overflow in desktop.c CWE-121 6.0 Medium2026-05-21
CVE-2026-44055 Bitwise OR logic bug enables shell injection CWE-78 7.5 High2026-05-21
CVE-2026-44054 Predictable afpd session token CWE-330 6.5 Medium2026-05-21
CVE-2026-44053 Weak cryptography in DHCAST128 UAM CWE-327 7.4 High2026-05-21
CVE-2026-44052 LDAP simple-bind password exposure in log output CWE-532 7.5 High2026-05-21
CVE-2026-44051 Arbitrary file read via attacker-controlled symlink creation CWE-59 8.1 High2026-05-21
CVE-2026-44050 Heap buffer overflow in CNID daemon comm_rcv() CWE-122 9.9 Critical2026-05-21

All 41 known CVE vulnerabilities affecting Netatalk with full Chinese analysis, references, and POCs where available.