Erlang Erlang\/ssh vulnerabilities

• erlang otp, erlang\/otp, erlang\/ssh +2 more SSH SFTP server denial of service via extended channel data infinite loop CVE-2026-54886 Fix available 5.3 MediumJuly 2, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root CVE-2026-53422 Fix available 2.3 LowJuly 2, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured CVE-2026-48855 Fix available 2.3 LowJune 10, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration CVE-2026-48859 6.3 MediumJune 10, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT CVE-2026-32147 Fix available 5.3 MediumApril 21, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more Pre-auth SSH DoS via unbounded zlib inflate CVE-2026-23943 Fix available 6.9 MediumMarch 13, 2026
• erlang otp, erlang\/otp, erlang\/ssh +2 more SFTP root escape via component-agnostic prefix check in ssh_sftpd CVE-2026-23942 Fix available 5.3 MediumMarch 13, 2026