Known Vulnerabilities for products from Erlang
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Erlang".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-69659 json | Not Provided | 2026-08-09 | 2026-08-10 | |
| CVE-2026-67585 json | Not Provided | 2026-08-07 | 2026-08-07 | |
| CVE-2026-66884 json | Not Provided | 2026-08-04 | 2026-08-04 | |
| CVE-2026-66883 json | Not Provided | 2026-08-04 | 2026-08-04 | |
| CVE-2026-65624 json | Not Provided | 2026-07-28 | 2026-07-29 | |
| CVE-2026-59251 json | Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated a... | Not Provided | 2026-07-27 | 2026-08-10 |
| CVE-2026-59250 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-59248 json | Not Provided | 2026-07-28 | 2026-07-29 | |
| CVE-2026-58229 json | Not Provided | 2026-07-14 | 2026-07-14 | |
| CVE-2026-58227 json | The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS o... | Not Provided | 2026-07-27 | 2026-08-10 |
| CVE-2026-55953 json | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in Serv... | Not Provided | 2026-07-27 | 2026-08-10 |
| CVE-2026-55952 json | The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello ... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-55950 json | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauth... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-55737 json | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can suppl... | Not Provided | 2026-07-27 | 2026-08-10 |
| CVE-2026-54891 json | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls... | Not Provided | 2026-07-02 | 2026-08-03 |
| CVE-2026-54890 json | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) ... | Not Provided | 2026-07-27 | 2026-08-10 |
| CVE-2026-54887 json | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation dur... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-54886 json | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authentic... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-53422 json | Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enume... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-49760 json | Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerabili... | Not Provided | 2026-06-10 | 2026-07-24 |
Known software with vulnerabilities from Erlang
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Erlang | Crypto | 1.0 |
| Application | Erlang | Erlang/otp | 17.0 |
| Application | Erlang | Otp | - |
| Application | Erlang | Rebar3 | 3.0.0 |