CVE-2026-44063: LDAP filter injection
Published May 21, 2026
·Updated
An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input.
Affected Software
1 affected component
Netatalk Netatalk>=2.1.0<=4.4.2
Event History
May 21, 2026
CVE Published
via MITRE·07:34 AM
Data Sourced
via MITRE·07:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-44063?
CVE-2026-44063 has a medium severity rating of 4.2.
2
How do I fix CVE-2026-44063?
To resolve CVE-2026-44063, upgrade to Netatalk version 4.5.0 or later.
3
What is CVE-2026-44063 about?
CVE-2026-44063 describes an LDAP filter injection vulnerability in Netatalk that allows remote authenticated attackers to manipulate LDAP queries.
4
Who is affected by CVE-2026-44063?
Users of Netatalk version 2.1.0 through 4.4.2 are affected by CVE-2026-44063.
5
Can CVE-2026-44063 lead to data exposure?
Yes, CVE-2026-44063 can allow remote authenticated attackers to obtain limited information from LDAP queries.