What’s Vulnerable › Vulnerabilities
CVE-2026-44065: Off-by-two in papd lp_write()
- Severity: medium (CVSS 4.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-21 · updated 2026-07-23
- Weakness: CWE-193
Description
An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.
Affected products
- Netatalk: from 2.0.0 through 4.4.2
References
Get alerted when CVE-2026-44065 or the next vulnerability affects your stack