Erlang OTP

• CVE-2025-32433 Critical 10.0 Exploited Erlang/OTP SSH Vulnerable to Pre-Authentication RCE 98.9%
• CVE-2026-96596 Medium 5.9 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole 0.2%
• CVE-2026-105236 Medium 6.3 TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries 0.4%
• CVE-2026-94200 High 8.2 TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl 0.5%
• CVE-2026-65634 High 8.2 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder 0.3%
• CVE-2026-68956 High 7.1 SSH daemon allocates unbounded idle session channels, bypassing max_channels 0.4%
• CVE-2026-89422 Critical 9.3 TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension 0.5%
• CVE-2026-69664 High 8.7 httpd parks a request worker indefinitely on a malformed chunk size sent after the headers 0.9%
• CVE-2026-70409 Medium 6.3 eldap does not bound the port component of a referral URL before integer conversion 0.6%
• CVE-2026-70405 Medium 6.3 snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields 0.7%
• CVE-2026-66835 High 8.2 httpd mod_auth directory protection bypassed by a doubled slash in the request path 1.0%
• CVE-2026-73270 High 8.2 httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems 0.9%
• CVE-2026-75538 High 8.2 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer 0.9%
• CVE-2026-74994 Medium 6.0 inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth 0.6%
• CVE-2026-74835 High 8.7 inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception 0.6%
• CVE-2026-73812 High 8.3 inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length 0.5%
• CVE-2026-73276 High 8.3 inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i 0.6%
• CVE-2026-66357 High 8.3 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation 0.6%
• CVE-2026-59696 Medium 6.9 uri_string does not bound the port component of a URI before integer conversion 0.7%
• CVE-2026-55951 High 8.2 httpc memory exhaustion via unbounded response header accumulation 0.7%
• CVE-2026-71380 High 8.7 httpd applies no timeout while receiving a request body, parking a worker on a stalled client 0.7%
• CVE-2026-71562 Medium 6.3 httpc does not bound server-supplied numeric header values before integer conversion 0.6%
• CVE-2026-70399 High 8.7 httpd does not enforce the documented default max_clients connection limit 0.9%
• CVE-2026-54890 High 8.2 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding 0.4%
• CVE-2026-59251 High 8.7 Denial of service via exponential certificate policy tree growth in path validation 0.3%
• CVE-2026-59250 High 8.3 Megaco flex scanner buffer overflow via oversized property parm name 0.8%
• CVE-2026-55953 Critical 9.1 TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 0.2%
• CVE-2026-55737 Medium 5.1 Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder 0.3%
• CVE-2026-47078 Medium 4.8 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass 0.1%
• CVE-2026-42792 Medium 6.3 epmd permanent DoS via EMFILE on accept(2) in erts 0.4%
• CVE-2026-58227 High 8.7 TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain 0.4%
• CVE-2026-54891 Medium 6.3 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 0.1%
• CVE-2026-55950 High 8.7 DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions 0.4%
• CVE-2026-54886 Medium 5.3 SSH SFTP server denial of service via extended channel data infinite loop 0.3%
• CVE-2026-55952 High 8.2 TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 0.5%
• CVE-2026-54887 Medium 6.3 DTLS server cookie bypass during startup window due to empty initial cookie secret 0.2%
• CVE-2026-53422 Low 2.3 SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root 0.3%
• CVE-2026-48856 High 7.1 httpc leaks Authorization header to cross-origin redirect targets 0.3%
• CVE-2026-48860 High 7.5 Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist 0.2%
• CVE-2026-48855 Low 2.3 SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 0.3%
• CVE-2026-48858 Medium 6.3 ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks 0.2%
• CVE-2026-48859 Medium 6.3 SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration 0.4%
• CVE-2026-49759 High 8.2 Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash 0.5%
• CVE-2026-49760 Medium 6.9 Stack Buffer Overflow in ei_s_print_term at Very Large Integer 0.1%
• CVE-2026-42790 High 7.4 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 0.3%
• CVE-2026-42791 Medium 6.3 OCSP responder certificate validity period not checked in public_key 0.3%
• CVE-2026-42789 High 8.0 Non-CA certificate accepted as intermediate issuer in public_key path validation 0.4%
• CVE-2026-32147 Medium 5.3 SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT 0.4%
• CVE-2026-28808 High 7.4 ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) 0.6%
• CVE-2026-32144 High 7.4 OCSP designated-responder authorization bypass via missing signature verification 0.2%