Skip to contentErlang Erlang\/otp vulnerabilities
- erlang erts, otp, erlang\/otp +2 moreBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decodingCVE-2026-54890Fix available8.2 High
- erlang otp, erlang\/otp, erlang\/public key +2 moreDenial of service via exponential certificate policy tree growth in path validationCVE-2026-59251Fix available8.7 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationCVE-2026-55953Fix available9.1 Critical
- erlang erts, otp, erlang\/otp +2 moreHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderCVE-2026-55737Fix available5.1 Medium
- erlang erts, otp, erlang\/otp +2 moreepmd permanent DoS via EMFILE on accept(2) in ertsCVE-2026-42792Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainCVE-2026-58227Fix available8.7 High
- erlang otp, erlang\/otp, erlang\/ssl +2 morePlaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in sslCVE-2026-54891Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessionsCVE-2026-55950Fix available8.7 High
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSSH SFTP server denial of service via extended channel data infinite loopCVE-2026-54886Fix available5.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.3 server denial of service via malformed ClientHello pre-shared key extensionCVE-2026-55952Fix available8.2 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDTLS server cookie bypass during startup window due to empty initial cookie secretCVE-2026-54887Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured rootCVE-2026-53422Fix available2.3 Low
- erlang otp, erlang\/inets, erlang\/otp +2 morehttpc leaks Authorization header to cross-origin redirect targetsCVE-2026-48856Fix available7.1 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDistribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distCVE-2026-48860Fix available7.5 High
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is ConfiguredCVE-2026-48855Fix available2.3 Low
- erlang ftp, otp, erlang\/inets +1 more +3 moreftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacksCVE-2026-48858Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumerationCVE-2026-488596.3 Medium
- erlang erts, otp, erlang\/otp +3 more +5 moreStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashCVE-2026-49759Fix available8.8 High
- erlang otp, erl interface, erlang\/otp +2 moreStack Buffer Overflow in ei_s_print_term at Very Large IntegerCVE-2026-49760Fix available6.9 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 morenameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationCVE-2026-42790Fix available7.6 High
- erlang otp, erlang\/otp +1 moreOCSP responder certificate validity period not checked in public_keyCVE-2026-42791Fix available6.3 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 moreNon-CA certificate accepted as intermediate issuer in public_key path validationCVE-2026-42789Fix available7.0 High
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP chroot bypass via path traversal in SSH_FXP_FSETSTATCVE-2026-32147Fix available5.3 Medium
- erlang otp, erlang\/inets, erlang\/otp +3 more +5 moreScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)CVE-2026-28808Fix available8.3 High
- erlang otp, erlang\/otp, erlang\/public key +4 more +6 moreOCSP designated-responder authorization bypass via missing signature verificationCVE-2026-32144Fix available7.6 High
- erlang otp, erlang\/otp +1 morePredictable DNS Transaction IDs Enable Cache Poisoning in Built-in ResolverCVE-2026-28810Fix available6.3 Medium
- erlang otp, erlang\/inets, erlang\/otp +2 moreRequest smuggling via first-wins Content-Length parsing in inets httpdCVE-2026-23941Fix available7.0 High
- erlang otp, erlang\/otp, erlang\/ssh +2 morePre-auth SSH DoS via unbounded zlib inflateCVE-2026-23943Fix available6.9 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP root escape via component-agnostic prefix check in ssh_sftpdCVE-2026-23942Fix available5.3 Medium
- erlang erlang/otp, otp, cisco cloud native broadband network gateway +22 more +24 moreErlang/OTP SSH Vulnerable to Pre-Authentication RCECVE-2025-32433In KEVPublic exploitFix availableEPSS 98.9%10.0 Critical
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- erlang erlang\/otpIn Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...CVE-2022-37026Fix available9.8 Critical
- erlang project erlang/otp, erlang erlang\/otp +1 moreA local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3....CVE-2021-292217.0 High
- erlang erlang\/otp, fedoraproject fedora +1 moreAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...CVE-2020-35733Fix available7.5 High
- erlang erlang\/otpErlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker...CVE-2020-25623Fix available7.5 High
- erlang erlang\/otpinets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-1000107Fix available6.1 Medium
- debian linux, erlang erlang\/otp +1 moreThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...CVE-2017-1000385Fix availableEPSS 22.1%5.9 Medium
- erlang erlang\/otpAn issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions...CVE-2016-10253Fix available9.8 Critical
- erlang erlang\/otp, opensuse, oracle solaris +2 moreErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...CVE-2015-2774Fix available5.9 Medium
- erlang erlang\/otpMultiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context...CVE-2014-1693Fix available7.5 High
- erlang crypto, ssh, erlang erlang\/otp +2 moreThe random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as...CVE-2011-0766Fix available7.8 High