CVE-2026-44052CWE-532
LDAP simple-bind password exposure in log output
High · published May 21, 2026
What it is
Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00416 · 34.8th percentile
- Weakness
- CWE-532 · Insertion of Sensitive Information into Log File
- Published
- 2026-05-21T07:34Z
EPSS history
Timeline