VulnerabilityDeferred

CVE-2026-44059

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption.

MEDIUM 4.5EPSS 0.07%

Does this matter?

Lower severity and a low EPSS score (0.07%). Track it; it rarely justifies an emergency change on its own.

Description

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption.

CVSS 3.1: 4.5 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS: 0.07% probability · 0th percentile
CISA KEV: Not listed
Weakness: CWE-362
Source: 33c584b5-0579-4c06-b2a0-8d8329fcab9c

References

https://netatalk.io/security/CVE-2026-44059

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.