Skip to content
Erlang Otp vulnerabilities
-
erlang otp, rebar3, hexpm hex +1 more +3 more
erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
CVE-2026-96596
Fix available
5.9 Medium
-
erlang otp
TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries
CVE-2026-105236
Fix available
6.3 Medium
-
erlang otp
TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl
CVE-2026-94200
Fix available
8.2 High
-
erlang otp
Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
CVE-2026-65634
Fix available
8.2 High
-
erlang otp
SSH daemon allocates unbounded idle session channels, bypassing max_channels
CVE-2026-68956
Fix available
7.1 High
-
erlang otp
TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
CVE-2026-89422
Fix available
9.3 Critical
-
erlang otp
httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
CVE-2026-69664
Fix available
8.7 High
-
erlang otp
eldap does not bound the port component of a referral URL before integer conversion
CVE-2026-70409
Fix available
6.3 Medium
-
erlang otp
snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields
CVE-2026-70405
Fix available
6.3 Medium
-
erlang otp
httpd mod_auth directory protection bypassed by a doubled slash in the request path
CVE-2026-66835
Fix available
8.2 High
-
erlang otp
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
CVE-2026-73270
Fix available
8.2 High
-
erlang otp
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer
CVE-2026-75538
Fix available
8.2 High
-
erlang otp
inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
CVE-2026-74994
Fix available
6.0 Medium
-
erlang otp
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
CVE-2026-74835
Fix available
8.7 High
-
erlang otp
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
CVE-2026-73812
Fix available
8.3 High
-
erlang otp
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
CVE-2026-73276
Fix available
8.3 High
-
erlang otp
inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
CVE-2026-66357
Fix available
8.3 High
-
erlang otp
uri_string does not bound the port component of a URI before integer conversion
CVE-2026-59696
Fix available
6.9 Medium
-
erlang otp
httpc memory exhaustion via unbounded response header accumulation
CVE-2026-55951
Fix available
8.2 High
-
erlang otp
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
CVE-2026-71380
Fix available
8.7 High
-
erlang otp
httpc does not bound server-supplied numeric header values before integer conversion
CVE-2026-71562
Fix available
6.3 Medium
-
erlang otp
httpd does not enforce the documented default max_clients connection limit
CVE-2026-70399
Fix available
8.7 High
-
erlang erts, otp, erlang\/otp +2 more
BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding
CVE-2026-54890
Fix available
8.2 High
-
erlang otp, erlang\/otp, erlang\/public key +2 more
Denial of service via exponential certificate policy tree growth in path validation
CVE-2026-59251
Fix available
8.7 High
-
erlang otp
Megaco flex scanner buffer overflow via oversized property parm name
CVE-2026-59250
Fix available
8.3 High
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
CVE-2026-55953
Fix available
9.1 Critical
-
erlang erts, otp, erlang\/otp +2 more
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
CVE-2026-55737
Fix available
5.1 Medium
-
erlang otp
Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
CVE-2026-47078
Fix available
4.8 Medium
-
erlang erts, otp, erlang\/otp +2 more
epmd permanent DoS via EMFILE on accept(2) in erts
CVE-2026-42792
Fix available
6.3 Medium
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
CVE-2026-58227
Fix available
8.7 High
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
CVE-2026-54891
Fix available
6.3 Medium
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions
CVE-2026-55950
Fix available
8.7 High
-
erlang otp, erlang\/otp, erlang\/ssh +2 more
SSH SFTP server denial of service via extended channel data infinite loop
CVE-2026-54886
Fix available
5.3 Medium
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension
CVE-2026-55952
Fix available
8.2 High
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
DTLS server cookie bypass during startup window due to empty initial cookie secret
CVE-2026-54887
Fix available
6.3 Medium
-
erlang otp, erlang\/otp, erlang\/ssh +2 more
SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root
CVE-2026-53422
Fix available
2.3 Low
-
erlang otp, erlang\/inets, erlang\/otp +2 more
httpc leaks Authorization header to cross-origin redirect targets
CVE-2026-48856
Fix available
7.1 High
-
erlang otp, erlang\/otp, erlang\/ssl +2 more
Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist
CVE-2026-48860
Fix available
7.5 High
-
erlang otp, erlang\/otp, erlang\/ssh +2 more
SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured
CVE-2026-48855
Fix available
2.3 Low
-
erlang ftp, otp, erlang\/inets +1 more +3 more
ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks
CVE-2026-48858
Fix available
6.3 Medium
-
erlang otp, erlang\/otp, erlang\/ssh +2 more
SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration
CVE-2026-48859
6.3 Medium
-
erlang erts, otp, erlang\/otp +3 more +5 more
Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash
CVE-2026-49759
Fix available
8.8 High
-
erlang otp, erl interface, erlang\/otp +2 more
Stack Buffer Overflow in ei_s_print_term at Very Large Integer
CVE-2026-49760
Fix available
6.9 Medium
-
erlang otp, erlang\/otp, red hat hardened images +3 more +5 more
nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification
CVE-2026-42790
Fix available
7.6 High
-
erlang otp, erlang\/otp +1 more
OCSP responder certificate validity period not checked in public_key
CVE-2026-42791
Fix available
6.3 Medium
-
erlang otp, erlang\/otp, red hat hardened images +3 more +5 more
Non-CA certificate accepted as intermediate issuer in public_key path validation
CVE-2026-42789
Fix available
7.0 High
-
erlang otp, erlang\/otp, erlang\/ssh +2 more
SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT
CVE-2026-32147
Fix available
5.3 Medium
-
erlang otp, erlang\/inets, erlang\/otp +3 more +5 more
ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)
CVE-2026-28808
Fix available
8.3 High
-
erlang otp, erlang\/otp, erlang\/public key +4 more +6 more
OCSP designated-responder authorization bypass via missing signature verification
CVE-2026-32144
Fix available
7.6 High
-
erlang otp, erlang\/otp +1 more
Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver
CVE-2026-28810
Fix available
6.3 Medium
- Show olderLoading…