Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e7e7bb2417 advisory.

    4.4.3 Release

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9fd50b2ff1 advisory.

    4.4.3 Release

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-62801 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6280-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 18, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : netatalk     CVE ID         : CVE-2026-44047 CVE-2026-44048 CVE-2026-44049 CVE-2026-44050                      CVE-2026-44051 CVE-2026-44052 CVE-2026-44054 CVE-2026-44055                      CVE-2026-44057 CVE-2026-44060 CVE-2026-44062 CVE-2026-44064                      CVE-2026-44066 CVE-2026-44068 CVE-2026-44076 CVE-2026-45354                      CVE-2026-45355 CVE-2026-45356 CVE-2026-45698 CVE-2026-45699

    Multiple security vulnerabilities were found in Netatalk, an     implementation of the Apple Filing Protocol (AFP), which could result in     denial of service, information disclosure or the execution of arbitrary     code.

    For the stable distribution (trixie), these problems have been fixed in     version 4.2.3~ds-1+deb13u2.

    We recommend that you upgrade your netatalk packages.

    For the detailed security status of netatalk please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/netatalk

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows     an attacker with access to the log files to obtain LDAP credentials. (CVE-2026-44052)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
318061	Fedora 44 : netatalk (2026-e7e7bb2417)	Nessus	Fedora Local Security Checks	critical
318059	Fedora 43 : netatalk (2026-9fd50b2ff1)	Nessus	Fedora Local Security Checks	critical
315215	Debian dsa-62801 : a2boot - security update	Nessus	Debian Local Security Checks	critical
314797	Linux Distros Unpatched Vulnerability : CVE-2026-44052	Nessus	Misc.	high

Detections

Analytics

CVE-2026-44052

high

Tenable Plugins

critical

critical

critical

high