CVE-2026-44073

Medium

Open

TLP:CLEAR

seteuid failure ignored in auth modules

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.

Details

CVSS Score: 4.0
EPSS Score ⓘ: 0.28%

20th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Confidence: 90%
Published: May 21, 2026
Last Modified: May 21, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.