Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how erlang compares to other vendors in security performance

View Risk Score →

Software

erlang erlang\/otp
30
erlang otp
19
erlang erlang
11
erlang erlang\/ssh
7
erlang ssh
7
erlang/otp
7
erlang erlang\/ssl
6
erlang erlang/otp
5
erlang erlang\/inets
4
erlang rebar3
3
erlang ssl
3
erlang/otp ssh
3
erlang inets
2
erlang otp ssh
2
erlang public_key
2
erlang solutions erlang/otp
2
erlang/otp inets
2
erlang/otp otp
2
erlang crypto
1
erlang erl interface
1
erlang erl_interface
1
erlang erlang/otp (ssl dtls server)
1
erlang erlang\/public key
1
erlang erts
1
erlang ftp
1
erlang otp (inets)
1
erlang otp ssh (ssh_sftpd/ssh_sftpd.erl)
1
erlang public_key (erlang/otp)
1
erlang solutions otp ssh
1
erlang solutions ssh
1
erlang ssh library
1
erlang stdlib
1
erlang/otp erlang otp
1
erlang/otp erlang/otp
1
erlang/otp ftp
1
erlang/otp otp kernel
1
erlang/otp public_key (pubkey_cert module)
1
erlang/otp ssl (dtls_packet_demux)
1
erlang/otp ssl (tls_gen_connection module)
1
erlang/rebar3
1

Erlang Erlang\/otpPlaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

Risk 27
Severity
6.3
First published (updated )
CVE-2026-54891

Erlang Erlang\/otpDTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

Risk 47
Severity
8.7
First published (updated )
CVE-2026-55950

Erlang Erlang\/otpSSH SFTP server denial of service via extended channel data infinite loop

Risk 26
Severity
5.3
First published (updated )
CVE-2026-54886

Erlang Erlang\/otpTLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

Risk 43
Severity
8.2
First published (updated )
CVE-2026-55952

Erlang Erlang\/otpDTLS server cookie bypass during startup window due to empty initial cookie secret

Risk 29
Severity
6.3
First published (updated )
CVE-2026-54887
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/otpSFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

Risk 22
Severity
2.3
First published (updated )
CVE-2026-53422

Erlang OTPBuffer Overflow

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2487607

Erlang Erlang\/inetshttpc leaks Authorization header to cross-origin redirect targets

Risk 40
Severity
7.1
First published (updated )
CVE-2026-48856

Erlang Erlang\/otpSFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

Risk 38
Severity
2.3
First published (updated )
CVE-2026-48855

Erlang Erlang\/otpDistribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

Risk 66
Severity
7.5
First published (updated )
CVE-2026-48860
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/otpftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks

Risk 40
Severity
6.3
First published (updated )
CVE-2026-48858

Erlang Erlang/OTPSSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

Risk 29
Severity
6.3
First published (updated )
CVE-2026-48859

Erlang ertsStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

Risk 57
Severity
8.8
First published (updated )
CVE-2026-49759

Erlang Erl InterfaceStack Buffer Overflow in ei_s_print_term at Very Large Integer

Risk 38
Severity
6.9
First published (updated )
CVE-2026-49760

Erlang OTPImproper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key m…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2482286
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/otpnameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

Risk 59
Severity
7.6
First published (updated )
CVE-2026-42790

Erlang Erlang\/otpOCSP responder certificate validity period not checked in public_key

Risk 37
Severity
6.3
First published (updated )
CVE-2026-42791

Erlang Erlang\/otpNon-CA certificate accepted as intermediate issuer in public_key path validation

Risk 58
Severity
7
First published (updated )
CVE-2026-42789

Erlang Erlang 29End of life details

EOL
May 11, 2029
First published (updated )
EOL-erlang-29

Erlang Erlang\/otpSFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT

Risk 26
Severity
5.3
First published (updated )
CVE-2026-32147
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang OTP (inets)Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2455909

Erlang Erlang\/inetsScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)

Risk 86
Severity
8.3
First published (updated )
CVE-2026-28808

Erlang Erlang\/otpOCSP designated-responder authorization bypass via missing signature verification

Risk 55
Severity
7.6
First published (updated )
CVE-2026-32144

Erlang Erlang\/otpPredictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver

Risk 29
Severity
6.3
First published (updated )
CVE-2026-28810

hex/esamlXXE in esaml SAML library allows local file read and potential SSRF

Risk 29
Severity
6.3
First published (updated )
CVE-2026-28809
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Erlang Erlang\/inetsRequest smuggling via first-wins Content-Length parsing in inets httpd

Risk 76
Severity
7
First published (updated )
CVE-2026-23941

Erlang Erlang\/otpPre-auth SSH DoS via unbounded zlib inflate

Risk 33
Severity
6.9
First published (updated )
CVE-2026-23943

Erlang Erlang\/otpSFTP root escape via component-agnostic prefix check in ssh_sftpd

Risk 34
Severity
5.3
First published (updated )
CVE-2026-23942

hexpm/hex_coreUnsafe Deserialization of Erlang Terms in hex_core

Risk 46
Severity
2
First published (updated )
CVE-2026-21619

Erlang OTPSSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

Risk 43
Severity
7.5
First published (updated )
CVE-2025-48041
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203