Skip to contentErlang Erlang\/ssl vulnerabilities
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationCVE-2026-55953Fix available9.1 Critical
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainCVE-2026-58227Fix available8.7 High
- erlang otp, erlang\/otp, erlang\/ssl +2 morePlaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in sslCVE-2026-54891Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessionsCVE-2026-55950Fix available8.7 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS 1.3 server denial of service via malformed ClientHello pre-shared key extensionCVE-2026-55952Fix available8.2 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDTLS server cookie bypass during startup window due to empty initial cookie secretCVE-2026-54887Fix available6.3 Medium
- erlang otp, erlang\/otp, erlang\/ssl +2 moreDistribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distCVE-2026-48860Fix available7.5 High
- erlang otp, erlang\/otp, erlang\/public key +4 more +6 moreOCSP designated-responder authorization bypass via missing signature verificationCVE-2026-32144Fix available7.6 High