CVE-2026-44057
Low · 3.1CVSS
3.1
EPSS
0.3%
Published
May 21, 2026
CISA due date
—
The record
A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|