From https://netatalk.io/security/CVE-2026-49390, The server quantum option in afp.conf is not range-validated during configuration parsing. Although the manual states that out-of-range values fall back to the default, the parser can accept invalid values and pass them into afpd startup.