CVE-2026-7835: Format string argument mismatch
Published May 21, 2026
·Updated
A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string processing.
Affected Software
2 affected componentsFixes available
Netatalk Netatalk>=3.0.3<=4.4.2
alpine/netatalk<4.5.0-r0
4.5.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/netatalkto a version that resolves this vulnerability.Fixed in 4.5.0-r0
Event History
May 21, 2026
CVE Published
via MITRE·07:35 AM
Data Sourced
via MITRE·07:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·08:16 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-7835?
The severity of CVE-2026-7835 is classified as low with a score of 3.1.
2
How do I fix CVE-2026-7835?
CVE-2026-7835 can be fixed by upgrading Netatalk to version 4.5.0 or later.
3
What systems are affected by CVE-2026-7835?
CVE-2026-7835 affects Netatalk versions from 3.0.3 through 4.4.2.
4
What is the nature of the vulnerability in CVE-2026-7835?
CVE-2026-7835 involves a format string argument mismatch, which can lead to potential security issues.
5
When was CVE-2026-7835 published?
CVE-2026-7835 was published on May 21, 2026.