Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how erlang/otp compares to other vendors in security performance

View Risk Score →

Erlang Erlang\/otpDenial of service via exponential certificate policy tree growth in path validation

Risk 47
Severity
8.7
First published (updated )
CVE-2026-59251

Erlang/OTP OTPMegaco flex scanner buffer overflow via oversized property parm name

Risk 52
Severity
8.3
First published (updated )
CVE-2026-59250

Erlang Erlang\/otpTLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Risk 63
Severity
9.1
First published (updated )
CVE-2026-55953

Erlang/OTP OTP sslTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

Risk 47
Severity
8.7
First published (updated )
CVE-2026-58227

Erlang Erlang\/otpPlaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

Risk 27
Severity
6.3
First published (updated )
CVE-2026-54891
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/otpDTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

Risk 47
Severity
8.7
First published (updated )
CVE-2026-55950

Erlang Erlang\/otpftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks

Risk 40
Severity
6.3
First published (updated )
CVE-2026-48858

Erlang Erlang\/otpNon-CA certificate accepted as intermediate issuer in public_key path validation

Risk 58
Severity
7
First published (updated )
CVE-2026-42789

Erlang/OTP OTP 27.0Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows O…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2455896

Erlang Erlang\/otpPredictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver

Risk 29
Severity
6.3
First published (updated )
CVE-2026-28810
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/inetsRequest smuggling via first-wins Content-Length parsing in inets httpd

Risk 76
Severity
7
First published (updated )
CVE-2026-23941

CVE-2025-4748: Erlang/OTP 17.0–28.0.0 absolute-path traversal in zip:unzip/zip:extract

First published (updated )
https://seclists.org/oss-sec/2025/q2/256

BleepingComputerCritical Erlang/OTP SSH RCE bug now has public exploits, patch now

Exploited
First published (updated )
News
BleepingComputer

CVE-2025-32433: Unauthenticated mote Code Execution in Erlang/OTP SSH

First published (updated )
https://seclists.org/oss-sec/2025/q2/63

CVE-2025-32433: Unauthenticated mote Code Execution in Erlang/OTP SSH

First published (updated )
https://seclists.org/oss-sec/2025/q2/52
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang/OTP OTPssl fails to validate incorrect extened key usage

Risk 39
Severity
5.5
First published (updated )
CVE-2024-53846

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203