CVE catalog

CVE-2026-44053

UBUNTU-CVE-2026-44053

[CVE catalog]

Severity
High · CVSS 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.30% · Oct 25, 2026

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannetatalk134.2.3~ds-1vulnerable
Debiannetatalk134.2.3~ds-1+deb13u1vulnerable
Debiannetatalk134.2.3~ds-1+deb13u2vulnerable
Debiannetatalk134.2.3~ds-2vulnerable
Debiannetatalk134.2.3~ds-2.1vulnerable
Debiannetatalk134.4.1~ds-1vulnerable
Debiannetatalk134.4.2~ds-1vulnerable
Debiannetatalk134.4.3~ds-1vulnerable
Debiannetatalk134.5.0~ds-1vulnerable
Debiannetatalk134.5.0~ds-2vulnerable
Debiannetatalk134.5.0~ds-3vulnerable
Debiannetatalk134.5.1~ds-1vulnerable
Debiannetatalk144.2.3~ds-1vulnerable
Debiannetatalk144.2.3~ds-2vulnerable
Debiannetatalk144.2.3~ds-2.1vulnerable
Debiannetatalk144.4.1~ds-1vulnerable
Debiannetatalk144.4.2~ds-1vulnerable
Debiannetatalk144.4.3~ds-1vulnerable
Debiannetatalk144.5.0~ds-1fixed
Ubuntunetatalkpro3.1.12~ds-3vulnerable
Ubuntunetatalkpro3.1.12~ds-4vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.1vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.3vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.3+esm1vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.4vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.4+esm1vulnerable
Ubuntunetatalkpro3.1.12~ds-4ubuntu0.20.04.4+esm2vulnerable
Ubuntunetatalk22.043.1.12~ds-9vulnerable
Ubuntunetatalk22.043.1.12~ds-9build1vulnerable
Ubuntunetatalk22.043.1.12~ds-9ubuntu0.22.04.1vulnerable
Ubuntunetatalk22.043.1.12~ds-9ubuntu0.22.04.3vulnerable
Ubuntunetatalk22.043.1.12~ds-9ubuntu0.22.04.4vulnerable
Ubuntunetatalk24.043.1.15~ds-1ubuntu1vulnerable
Ubuntunetatalk24.043.1.18~ds-1vulnerable
Ubuntunetatalk24.043.1.18~ds-1build2vulnerable
Ubuntunetatalk24.043.1.18~ds-1build4vulnerable
Ubuntunetatalk25.104.1.2~ds-4vulnerable
Ubuntunetatalk25.104.2.1~ds-1vulnerable
Ubuntunetatalk25.104.2.3~ds-1vulnerable
Ubuntunetatalk26.044.2.3~ds-1vulnerable
Ubuntunetatalk26.044.2.3~ds-2vulnerable
Ubuntunetatalk26.044.2.3~ds-2.1vulnerable
Ubuntunetatalk26.044.2.3~ds-2.1ubuntu0.1vulnerable
Ubuntunetatalk26.044.2.3~ds-2.1ubuntu0.2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannetatalkdeb144.5.0~ds-1Not reportedDEBIAN-CVE-2026-44053Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [a2boot]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [atalkd]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [libatalk]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [libatalk-dev]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [macipgw]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [netatalk]Affected
    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [netatalk-doc]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · all · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · all · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [netatalk-tests]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [netatalk-tools]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [papd]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

  • [timelord]Affected

    Source package: [netatalk]

    Details (4)

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · amd64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

    • 4.2.3~ds-1+deb13u2 · arm64 · trixie-security

      Affected

      pypi · netatalk · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]