Skip to contentErlang Otp vulnerabilities
- erlang otp, erlang\/inets, erlang\/otp +2 moreRequest smuggling via first-wins Content-Length parsing in inets httpdCVE-2026-23941Fix available7.0 High
- erlang otp, erlang\/otp, erlang\/ssh +2 morePre-auth SSH DoS via unbounded zlib inflateCVE-2026-23943Fix available6.9 Medium
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSFTP root escape via component-agnostic prefix check in ssh_sftpdCVE-2026-23942Fix available5.3 Medium
- erlang otpTFTP Path TraversalCVE-2026-21620Fix available2.3 Low
- erlang otpSSH_FXP_OPENDIR may Lead to Exhaustion of File HandlesCVE-2025-48041Fix available7.1 High
- erlang otpMalicious Key Exchange Messages may Lead to Excessive Resource ConsumptionCVE-2025-48040Fix available6.9 Medium
- erlang otpUnverified Paths can Cause Excessive Use of System ResourcesCVE-2025-48039Fix available5.3 Medium
- erlang otpUnverified File Handles can Cause Excessive Use of System ResourcesCVE-2025-48038Fix available5.3 Medium
- erlang otpAbsolute path traversal in zip:unzip/1,2CVE-2025-4748Fix available4.8 Medium
- erlang otpErlang/OTP SSH Has Strict KEX ViolationsCVE-2025-46712Fix available3.7 Low
- erlang erlang/otp, otp, cisco cloud native broadband network gateway +22 more +24 moreErlang/OTP SSH Vulnerable to Pre-Authentication RCECVE-2025-32433In KEVPublic exploitFix availableEPSS 98.9%10.0 Critical
- erlang otpKEX init error results with excessive memory usageCVE-2025-30211Fix available7.5 High
- erlang otpSSH SFTP packet size not verified properly in Erlang OTPCVE-2025-26618Fix available7.0 High
- erlang otpssl fails to validate incorrect extened key usageCVE-2024-53846Fix available5.5 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- erlang erlang\/otpIn Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...CVE-2022-37026Fix available9.8 Critical
- erlang project erlang/otp, erlang erlang\/otp +1 moreA local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3....CVE-2021-292217.0 High
- erlang erlang\/otp, fedoraproject fedora +1 moreAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...CVE-2020-35733Fix available7.5 High
- erlang erlang\/otpErlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker...CVE-2020-25623Fix available7.5 High
- erlang erlang\/otpinets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-1000107Fix available6.1 Medium
- debian linux, erlang erlang\/otp +1 moreThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...CVE-2017-1000385Fix availableEPSS 22.1%5.9 Medium
- erlang erlang\/otpAn issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions...CVE-2016-10253Fix available9.8 Critical
- erlang erlang\/otp, opensuse, oracle solaris +2 moreErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...CVE-2015-2774Fix available5.9 Medium
- erlang erlang\/otpMultiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context...CVE-2014-1693Fix available7.5 High
- erlang crypto, ssh, erlang erlang\/otp +2 moreThe random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as...CVE-2011-0766Fix available7.8 High