CVE-2026-44061

Name of the Vulnerable Software and Affected Versions Netatalk versions 1.5.0 through 4.4.2

Description The software uses DES-ECB (Data Encryption Standard in Electronic Codebook mode) for authentication, which is susceptible to a timing side channel. This allows a remote attacker to recover authentication credentials by performing timing analysis.

Recommendations Update to version 4.5.0.