Known Vulnerabilities for products from Erlang
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Erlang".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65624 json | Not Provided | 2026-07-28 | 2026-07-29 | |
| CVE-2026-59251 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-59250 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-59248 json | Not Provided | 2026-07-28 | 2026-07-29 | |
| CVE-2026-58229 json | Not Provided | 2026-07-14 | 2026-07-14 | |
| CVE-2026-58227 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-55953 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-55952 json | The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello ... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-55950 json | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauth... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-55737 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-54891 json | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-54887 json | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation dur... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-54886 json | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authentic... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-53422 json | Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enume... | Not Provided | 2026-07-02 | 2026-07-24 |
| CVE-2026-49760 json | Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerabili... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-49759 json | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash th... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-48860 json | Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauthenticated bypas... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-48859 json | Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote u... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-48858 json | Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF v... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-48856 json | Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. T... | Not Provided | 2026-06-10 | 2026-07-24 |
Known software with vulnerabilities from Erlang
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Erlang | Crypto | 1.0 |
| Application | Erlang | Erlang/otp | 17.0 |
| Application | Erlang | Otp | - |
| Application | Erlang | Rebar3 | 3.0.0 |