What is the CVSS score of EUVD-2026-31212?

EUVD-2026-31212 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L. EPSS exploitation probability: 0.1%.

Which versions of Netatalk are affected by EUVD-2026-31212?

Netatalk versions 3.1.0 through 4.4.2 contain a heap memory flaw allowing authenticated network users to crash the file-sharing service and potentially access sensitive memory contents.. A patch is available.

Netatalk EUVD-2026-31212

| CVE-2026-44066 HIGH

Out-of-bounds Read (CWE-125)

2026-05-21 securin

GHSA-93hj-5v8r-h26w

Buffer Overflow Information Disclosure Suse

7.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

May 21, 2026 - 08:04 vuln.today

DescriptionNVD

In Netatalk 3.1.0 through 4.4.2, heap out-of-bounds reads in spotlight rpc unmarshalling. Fixed in 4.4.3.

AnalysisAI

Heap out-of-bounds read in Netatalk 3.1.0 through 4.4.2 allows authenticated remote attackers to disclose sensitive memory contents and potentially crash the daemon by sending malformed Spotlight RPC requests. The flaw stems from improper bounds checking during Spotlight RPC unmarshalling and is fixed in version 4.4.3. …

RemediationAI

Within 24 hours: Identify and catalog all systems running Netatalk 3.1.0-4.4.2. Within 7 days: Deploy Netatalk 4.4.3 or later to all affected systems; pending patching, restrict network access to Spotlight RPC services via firewall rules. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-9256 HIGH This Week

8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

Vendor StatusVendor

EUVD-2026-31212 vulnerability details – vuln.today

Back