EUVD-2026-31232
GHSA-8vhp-c4pr-9rq3
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionNVD
In Netatalk 1.5.0 through 4.2.2, weak cryptography in dhcast128 uam. Fixed in 4.5.0.
AnalysisAI
Weak cryptography in the dhcast128 user authentication module (UAM) of Netatalk versions 1.5.0 through 4.2.2 allows remote attackers to compromise confidentiality and integrity of AFP authentication exchanges. The flaw was reported by Securin and tagged as an information disclosure issue; no public exploit identified at time of analysis. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Conduct asset inventory to identify all Netatalk deployments and confirm whether versions 1.5.0-4.2.2 are in use; assess criticality and user-access patterns for each instance. Within 7 days: Contact the Netatalk project/maintainers for patch timeline; implement network segmentation to restrict AFP access to trusted networks only; enable comprehensive authentication logging on all AFP services. …
Sign in for detailed remediation steps.
More from same product – last 7 days
Vendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today