CVEPublished 2026-05-21Modified 2026-07-230 articles on news4 live referencesNVD data

CVE-2026-7836

Vulnerability data via NVD (ingested)

CVSS v3.1
3.1
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS percentile
17
Exploit Prediction Scoring System · top 83% of all CVEs
Description

An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input.

Timeline
Published 2026-05-21
Modified 2026-07-23

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common). Live host counts are a Premium feature.

More intel sources (5)

Known PoCs on GitHub (2)

We haven't classified any articles referencing CVE-2026-7836 yet. The external references above still apply.