CVE-2026-44061CWE-208
DES-ECB auth with timing side channel
Medium · published May 21, 2026
What it is
Netatalk 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, which allows a remote attacker to recover authentication credentials via timing analysis.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00455 · 38.5th percentile
- Weakness
- CWE-208 · Observable Timing Discrepancy
- Published
- 2026-05-21T07:34Z
EPSS history
Timeline