Skip to content

Known vulnerabilities in erlang otp

Is your version affected?

CVE Summary Score Published
CVE-2026-89422 Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client… 9.3 Critical Sep 22, 2026
CVE-2026-55953 The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in… 9.1 Critical Jul 27, 2026
CVE-2025-32433 Exploited Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability 10.0 Critical Apr 16, 2025

Other erlang products