CVE-2026-44061
Deferred Deferred - Pending Action
Timing Side Channel in Netatalk Authentication

Publication date: 2026-05-21

Last updated on: 2026-05-21

Assigner: securin

Description
Netatalk 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, which allows a remote attacker to recover authentication credentials via timing analysis.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-21
Last Modified
2026-05-21
Generated
2026-06-10
AI Q&A
2026-05-21
EPSS Evaluated
2026-06-09
NVD
CVE-2026-44061
EUVD
EUVD-2026-31236
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
netatalk netatalk From 1.5.0 (inc) to 4.4.2 (inc)
netatalk netatalk 4.5.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-208 Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Netatalk versions 1.5.0 through 4.4.2 and involves the use of DES-ECB authentication that is susceptible to a timing side channel attack.

A timing side channel attack exploits the time variations in cryptographic operations to gain information about the secret keys or authentication data.

This issue was fixed in Netatalk version 4.5.0.

Impact Analysis

The vulnerability can allow an attacker to exploit timing differences in the DES-ECB authentication process to potentially recover sensitive authentication information.

According to the CVSS v3.1 score of 5.9, the impact is moderate with high confidentiality impact but no impact on integrity or availability.

Mitigation Strategies

The vulnerability in Netatalk versions 1.5.0 through 4.4.2 is fixed in version 4.5.0.

To mitigate this vulnerability, you should upgrade Netatalk to version 4.5.0 or later.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44061. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart