CVE-2026-7836
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
In Netatalk versions 2.0.0 through 4.4.2, an incorrect calculation in the hextoint macro due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input.
Risk Assessment
The organization is at risk of limited data modification by an authenticated attacker, which could compromise data integrity in the Netatalk system.
Recommendation
Update Netatalk to version 4.4.3 or later, which includes a fix for the hextoint macro.
Original NVD description (English source)
An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input.