CVE-2026-44053
Weak Cryptography in Netatalk dhcast128 UAM
Publication date: 2026-05-21
Last updated on: 2026-05-21
Assigner: securin
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| netatalk | netatalk | From 1.5.0 (inc) to 4.2.2 (inc) |
| netatalk | netatalk | 4.5.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-327 | The product uses a broken or risky cryptographic algorithm or protocol. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Netatalk versions 1.5.0 through 4.2.2 and involves the use of weak cryptography in the dhcast128 user authentication module (uam). It was addressed and fixed in version 4.5.0.
How can this vulnerability impact me? :
The vulnerability can lead to a high impact on confidentiality and integrity of data, as indicated by the CVSS score. An attacker could potentially exploit the weak cryptography to compromise sensitive information or manipulate data, although exploitation requires high attack complexity and no privileges or user interaction.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, upgrade Netatalk to version 4.5.0 or later, where the weak cryptography in dhcast128 uam has been fixed.