Security Advisory

CVE-2026-44068

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-21 07:34:57

Last updated 2026-05-21 12:48:12

Assigner securin

CVSS score 7.6

State PUBLISHED

Description

Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names.

← Browse all CVEs View on cve.org ↗