| CVE-2026-96596 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm…
|
5.9
Medium
|
Oct 14, 2026 |
| CVE-2026-105236 |
Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a…
|
6.3
Medium
|
Oct 14, 2026 |
| CVE-2026-94200 |
Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and…
|
8.2
High
|
Oct 14, 2026 |
| CVE-2026-65634 |
Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated…
|
8.2
High
|
Sep 22, 2026 |
| CVE-2026-68956 |
Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote…
|
7.1
High
|
Sep 22, 2026 |
| CVE-2026-89422 |
Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client…
|
9.3
Critical
|
Sep 22, 2026 |
| CVE-2026-69664 |
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated…
|
8.7
High
|
Sep 1, 2026 |
| CVE-2026-70409 |
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised…
|
6.3
Medium
|
Sep 1, 2026 |
| CVE-2026-70405 |
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to…
|
6.3
Medium
|
Sep 1, 2026 |
| CVE-2026-66835 |
Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a…
|
8.2
High
|
Sep 1, 2026 |
| CVE-2026-73270 |
Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker…
|
8.2
High
|
Sep 1, 2026 |
| CVE-2026-75538 |
An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed…
|
8.2
High
|
Sep 1, 2026 |
| CVE-2026-74994 |
The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and…
|
6.0
Medium
|
Sep 1, 2026 |
| CVE-2026-74835 |
The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request
|
8.7
High
|
Sep 1, 2026 |
| CVE-2026-73812 |
httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL…
|
8.3
High
|
Sep 1, 2026 |
| CVE-2026-73276 |
Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities
|
8.3
High
|
Sep 1, 2026 |
| CVE-2026-66357 |
httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines)
|
8.3
High
|
Sep 1, 2026 |
| CVE-2026-59696 |
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to…
|
6.9
Medium
|
Sep 1, 2026 |
| CVE-2026-55951 |
The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server
|
8.2
High
|
Sep 1, 2026 |
| CVE-2026-71380 |
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated…
|
8.7
High
|
Sep 1, 2026 |
| CVE-2026-71562 |
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or…
|
6.3
Medium
|
Sep 1, 2026 |
| CVE-2026-70399 |
Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated…
|
8.7
High
|
Sep 1, 2026 |
| CVE-2026-54890 |
Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts…
|
8.2
High
|
Jul 27, 2026 |
| CVE-2026-59251 |
Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote…
|
8.7
High
|
Jul 27, 2026 |
| CVE-2026-59250 |
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to…
|
8.3
High
|
Jul 27, 2026 |