CVE-2026-7836

Summary

An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input.

Affected Software

VendorProductVersion RangeStatus
NetatalkNetatalk2.0.0 <= 4.4.2affected
NetatalkNetatalk4.5.0unaffected

Weaknesses

  • CWE-682: Incorrect Calculation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References