CVE-2026-44054 — Predictable afpd session token
Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by expl…
Published: 2026-05-21 · CVSS: 6.5 · CVSS 3.1
Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7