| CVE-2026-55953 |
The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in…
|
9.1
Critique
|
27 juil. 2026 |
| CVE-2026-55737 |
Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who…
|
5.1
Moyenne
|
27 juil. 2026 |
| CVE-2026-47078 |
Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended…
|
4.8
Moyenne
|
27 juil. 2026 |
| CVE-2026-42792 |
Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote…
|
6.3
Moyenne
|
27 juil. 2026 |
| CVE-2026-58227 |
The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during…
|
8.7
Élevée
|
27 juil. 2026 |
| CVE-2026-54891 |
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl…
|
6.3
Moyenne
|
2 juil. 2026 |
| CVE-2026-55950 |
Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an…
|
8.7
Élevée
|
2 juil. 2026 |
| CVE-2026-54886 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an…
|
5.3
Moyenne
|
2 juil. 2026 |
| CVE-2026-55952 |
The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3…
|
8.2
Élevée
|
2 juil. 2026 |
| CVE-2026-54887 |
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie…
|
6.3
Moyenne
|
2 juil. 2026 |
| CVE-2026-53422 |
Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user…
|
2.3
Faible
|
2 juil. 2026 |
| CVE-2026-48856 |
Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive…
|
7.1
Élevée
|
10 juin 2026 |
| CVE-2026-48855 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows…
|
2.3
Faible
|
10 juin 2026 |
| CVE-2026-48860 |
Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows…
|
7.5
Élevée
|
10 juin 2026 |
| CVE-2026-48858 |
Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and…
|
6.3
Moyenne
|
10 juin 2026 |
| CVE-2026-48859 |
Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated…
|
6.3
Moyenne
|
10 juin 2026 |
| CVE-2026-49759 |
Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to…
|
8.8
Élevée
|
10 juin 2026 |
| CVE-2026-49760 |
Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow
|
6.9
Moyenne
|
10 juin 2026 |
| CVE-2026-42790 |
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…
|
7.6
Élevée
|
27 mai 2026 |
| CVE-2026-42791 |
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows forged OCSP responses…
|
6.3
Moyenne
|
27 mai 2026 |
| CVE-2026-42789 |
Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…
|
7.0
Élevée
|
27 mai 2026 |
| CVE-2026-32147 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh…
|
5.3
Moyenne
|
21 avr. 2026 |
| CVE-2026-28808 |
Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts…
|
8.3
Élevée
|
7 avr. 2026 |
| CVE-2026-32144 |
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP…
|
7.6
Élevée
|
7 avr. 2026 |
| CVE-2026-28810 |
Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows…
|
6.3
Moyenne
|
7 avr. 2026 |