7.4
CVE-2026-44053
- EPSS 0.3%
- Veröffentlicht 21.05.2026 07:34:27
- Zuletzt bearbeitet 21.05.2026 15:20:19
- Quelle 33c584b5-0579-4c06-b2a0-8d8329
- CVE-Watchlists
- Unerledigt
Weak cryptography in DHCAST128 UAM
Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNetatalk
≫
Produkt
Netatalk
Default Statusunaffected
Version <=
4.2.2
Version
1.5.0
Status
affected
Version
4.5.0
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.216 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 33c584b5-0579-4c06-b2a0-8d8329fcab9c | 7.4 | 2.2 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
https://netatalk.io/security/CVE-2026-44053