PT-2026-42431 · Netatalk · Netatalk

Arjun Basnet · Published 2026-05-21 · Updated 2026-05-21 · CVE-2026-7836

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netatalk versions 2.0.0 through 4.4.2

Description An incorrect calculation in the hextoint macro occurs due to improper handling of uppercase characters. This allows a remote authenticated attacker to cause limited data modification by providing crafted hexadecimal input.

Recommendations Update to version 4.5.0.

Fix

Weakness Enumeration

CWE-682

Related Identifiers

CVE-2026-7836

Affected Products

Netatalk

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-7836 · Security Note
• https://netatalk.io/security/CVE-2026-7836 · Vendor Advisory