# Erlang OTP.

Every CVE that names Erlang OTP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries](https://agentprime.io/advisories/CVE-2026-105236.md)
  `CVE-2026-105236` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Weak cryptography or TLS
- [TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl](https://agentprime.io/advisories/CVE-2026-94200.md)
  `CVE-2026-94200` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1288
- [Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder](https://agentprime.io/advisories/CVE-2026-65634.md)
  `CVE-2026-65634` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service
- [SSH daemon allocates unbounded idle session channels, bypassing max_channels](https://agentprime.io/advisories/CVE-2026-68956.md)
  `CVE-2026-68956` · CVE record: Erlang OTP · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service
- [TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension](https://agentprime.io/advisories/CVE-2026-89422.md)
  `CVE-2026-89422` · CVE record: Erlang OTP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-322
- [httpd parks a request worker indefinitely on a malformed chunk size sent after the headers](https://agentprime.io/advisories/CVE-2026-69664.md)
  `CVE-2026-69664` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [eldap does not bound the port component of a referral URL before integer conversion](https://agentprime.io/advisories/CVE-2026-70409.md)
  `CVE-2026-70409` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-1284
- [snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields](https://agentprime.io/advisories/CVE-2026-70405.md)
  `CVE-2026-70405` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-1284
- [httpd mod_auth directory protection bypassed by a doubled slash in the request path](https://agentprime.io/advisories/CVE-2026-66835.md)
  `CVE-2026-66835` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-50
- [httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems](https://agentprime.io/advisories/CVE-2026-73270.md)
  `CVE-2026-73270` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-178
- [A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer](https://agentprime.io/advisories/CVE-2026-75538.md)
  `CVE-2026-75538` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption
- [inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth](https://agentprime.io/advisories/CVE-2026-74994.md)
  `CVE-2026-74994` · CVE record: Erlang OTP · CVSS 6.0 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control, CWE-1289
- [inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception](https://agentprime.io/advisories/CVE-2026-74835.md)
  `CVE-2026-74835` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length](https://agentprime.io/advisories/CVE-2026-73812.md)
  `CVE-2026-73812` · CVE record: Erlang OTP · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: HTTP request smuggling
- [inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i](https://agentprime.io/advisories/CVE-2026-73276.md)
  `CVE-2026-73276` · CVE record: Erlang OTP · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: HTTP request smuggling
- [inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation](https://agentprime.io/advisories/CVE-2026-66357.md)
  `CVE-2026-66357` · CVE record: Erlang OTP · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: HTTP request smuggling
- [uri_string does not bound the port component of a URI before integer conversion](https://agentprime.io/advisories/CVE-2026-59696.md)
  `CVE-2026-59696` · CVE record: Erlang OTP · CVSS 6.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-1284
- [httpc memory exhaustion via unbounded response header accumulation](https://agentprime.io/advisories/CVE-2026-55951.md)
  `CVE-2026-55951` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [httpd applies no timeout while receiving a request body, parking a worker on a stalled client](https://agentprime.io/advisories/CVE-2026-71380.md)
  `CVE-2026-71380` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [httpc does not bound server-supplied numeric header values before integer conversion](https://agentprime.io/advisories/CVE-2026-71562.md)
  `CVE-2026-71562` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-1284
- [httpd does not enforce the documented default max_clients connection limit](https://agentprime.io/advisories/CVE-2026-70399.md)
  `CVE-2026-70399` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service
- [BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding](https://agentprime.io/advisories/CVE-2026-54890.md)
  `CVE-2026-54890` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 27 Jul 2026 · Tags: Memory corruption, Denial of service, CWE-1284
- [Denial of service via exponential certificate policy tree growth in path validation](https://agentprime.io/advisories/CVE-2026-59251.md)
  `CVE-2026-59251` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service
- [Megaco flex scanner buffer overflow via oversized property parm name](https://agentprime.io/advisories/CVE-2026-59250.md)
  `CVE-2026-59250` · CVE record: Erlang OTP · CVSS 8.3 High · Not analysed yet · Published 27 Jul 2026 · Tags: Memory corruption
- [TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication](https://agentprime.io/advisories/CVE-2026-55953.md)
  `CVE-2026-55953` · CVE record: Erlang OTP · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-757
- [Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder](https://agentprime.io/advisories/CVE-2026-55737.md)
  `CVE-2026-55737` · CVE record: Erlang OTP · CVSS 5.1 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Memory corruption, CWE-195
- [Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass](https://agentprime.io/advisories/CVE-2026-47078.md)
  `CVE-2026-47078` · CVE record: Erlang OTP · CVSS 4.8 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Path traversal
- [epmd permanent DoS via EMFILE on accept(2) in erts](https://agentprime.io/advisories/CVE-2026-42792.md)
  `CVE-2026-42792` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service, CWE-755
- [TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain](https://agentprime.io/advisories/CVE-2026-58227.md)
  `CVE-2026-58227` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service
- [Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl](https://agentprime.io/advisories/CVE-2026-54891.md)
  `CVE-2026-54891` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-924
- [DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions](https://agentprime.io/advisories/CVE-2026-55950.md)
  `CVE-2026-55950` · CVE record: Erlang OTP · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Race condition
- [SSH SFTP server denial of service via extended channel data infinite loop](https://agentprime.io/advisories/CVE-2026-54886.md)
  `CVE-2026-54886` · CVE record: Erlang OTP · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Denial of service
- [TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension](https://agentprime.io/advisories/CVE-2026-55952.md)
  `CVE-2026-55952` · CVE record: Erlang OTP · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-1284
- [DTLS server cookie bypass during startup window due to empty initial cookie secret](https://agentprime.io/advisories/CVE-2026-54887.md)
  `CVE-2026-54887` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-1394
- [SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root](https://agentprime.io/advisories/CVE-2026-53422.md)
  `CVE-2026-53422` · CVE record: Erlang OTP · CVSS 2.3 Low · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-204
- [httpc leaks Authorization header to cross-origin redirect targets](https://agentprime.io/advisories/CVE-2026-48856.md)
  `CVE-2026-48856` · CVE record: Erlang OTP · CVSS 7.1 High · Not analysed yet · Published 10 Jun 2026 · Tags: Open redirect
- [Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist](https://agentprime.io/advisories/CVE-2026-48860.md)
  `CVE-2026-48860` · CVE record: Erlang OTP · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Broken access control, CWE-1025
- [SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured](https://agentprime.io/advisories/CVE-2026-48855.md)
  `CVE-2026-48855` · CVE record: Erlang OTP · CVSS 2.3 Low · Not analysed yet · Published 10 Jun 2026 · Tags: Information disclosure
- [ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks](https://agentprime.io/advisories/CVE-2026-48858.md)
  `CVE-2026-48858` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration](https://agentprime.io/advisories/CVE-2026-48859.md)
  `CVE-2026-48859` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-208
- [Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash](https://agentprime.io/advisories/CVE-2026-49759.md)
  `CVE-2026-49759` · CVE record: Erlang OTP · CVSS 8.8 High · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [Stack Buffer Overflow in ei_s_print_term at Very Large Integer](https://agentprime.io/advisories/CVE-2026-49760.md)
  `CVE-2026-49760` · CVE record: Erlang OTP · CVSS 6.9 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Memory corruption
- [nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification](https://agentprime.io/advisories/CVE-2026-42790.md)
  `CVE-2026-42790` · CVE record: Erlang OTP · CVSS 7.6 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [OCSP responder certificate validity period not checked in public_key](https://agentprime.io/advisories/CVE-2026-42791.md)
  `CVE-2026-42791` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-672
- [Non-CA certificate accepted as intermediate issuer in public_key path validation](https://agentprime.io/advisories/CVE-2026-42789.md)
  `CVE-2026-42789` · CVE record: Erlang OTP · CVSS 7.0 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-296
- [SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT](https://agentprime.io/advisories/CVE-2026-32147.md)
  `CVE-2026-32147` · CVE record: Erlang OTP · CVSS 5.3 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: Path traversal
- [ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)](https://agentprime.io/advisories/CVE-2026-28808.md)
  `CVE-2026-28808` · CVE record: Erlang OTP · CVSS 8.3 High · Not analysed yet · Published 7 Apr 2026 · Tags: Broken access control, CWE-551
- [OCSP designated-responder authorization bypass via missing signature verification](https://agentprime.io/advisories/CVE-2026-32144.md)
  `CVE-2026-32144` · CVE record: Erlang OTP · CVSS 7.6 High · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver](https://agentprime.io/advisories/CVE-2026-28810.md)
  `CVE-2026-28810` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-340
- [Request smuggling via first-wins Content-Length parsing in inets httpd](https://agentprime.io/advisories/CVE-2026-23941.md)
  `CVE-2026-23941` · CVE record: Erlang OTP · CVSS 7.0 High · Not analysed yet · Published 13 Mar 2026 · Tags: HTTP request smuggling
- [Pre-auth SSH DoS via unbounded zlib inflate](https://agentprime.io/advisories/CVE-2026-23943.md)
  `CVE-2026-23943` · CVE record: Erlang OTP · CVSS 6.9 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-409
- [SFTP root escape via component-agnostic prefix check in ssh_sftpd](https://agentprime.io/advisories/CVE-2026-23942.md)
  `CVE-2026-23942` · CVE record: Erlang OTP · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Path traversal
- [TFTP Path Traversal](https://agentprime.io/advisories/CVE-2026-21620.md)
  `CVE-2026-21620` · CVE record: Erlang OTP · CVSS 2.3 Low · Not analysed yet · Published 20 Feb 2026 · Tags: Path traversal
- [SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles](https://agentprime.io/advisories/CVE-2025-48041.md)
  `CVE-2025-48041` · CVE record: Erlang OTP · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2025 · Tags: Denial of service
- [Malicious Key Exchange Messages may Lead to Excessive Resource Consumption](https://agentprime.io/advisories/CVE-2025-48040.md)
  `CVE-2025-48040` · CVE record: Erlang OTP · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Denial of service
- [Unverified Paths can Cause Excessive Use of System Resources](https://agentprime.io/advisories/CVE-2025-48039.md)
  `CVE-2025-48039` · CVE record: Erlang OTP · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Denial of service
- [Unverified File Handles can Cause Excessive Use of System Resources](https://agentprime.io/advisories/CVE-2025-48038.md)
  `CVE-2025-48038` · CVE record: Erlang OTP · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Denial of service
- [Absolute path traversal in zip:unzip/1,2](https://agentprime.io/advisories/CVE-2025-4748.md)
  `CVE-2025-4748` · CVE record: Erlang OTP · CVSS 4.8 Medium · Not analysed yet · Published 16 Jun 2025 · Tags: Path traversal
- [Erlang/OTP SSH Has Strict KEX Violations](https://agentprime.io/advisories/CVE-2025-46712.md)
  `CVE-2025-46712` · CVE record: erlang otp · CVSS 3.7 Low · Not analysed yet · Published 8 May 2025 · Tags: CWE-440
- [Erlang/OTP SSH Vulnerable to Pre-Authentication RCE](https://agentprime.io/advisories/CVE-2025-32433.md)
  `CVE-2025-32433` · CVE record: erlang otp · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 16 Apr 2025 · Tags: Authentication bypass

Older: <https://agentprime.io/advisories/technology/erlang-otp.md?cursor=WyIyMDI1LTA0LTE2VDIxOjM0OjM3LjQ1NzAwMFoiLCJDVkUtMjAyNS0zMjQzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=erlang-otp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/erlang-otp/>. Everything for agents: <https://agentprime.io/llms.txt>.