Vendors / Erlang Records 81 All Threatist records
Exploited (KEV) 1
CVSS critical 6
CVSS high 39
Exploited now Erlang records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.
CVSS 4.0 HIGH 8.3· Network · No auth · No interaction · EPSS 0.00566 · Published 2026-04-07 · No fix listed CWE-863
Priority LOW 34
Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00234 · Published 2026-06-10 · Partial fix · 7.0 CWE-918
Priority LOW 31
Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.
CVSS 4.0 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00335 · Published 2026-06-10 · Fixed CWE-601
Priority LOW 31
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.
CVSS 4.0 HIGH 7.0· Network · No auth · No interaction · EPSS 0.00481 · Published 2026-03-13 · No fix listed CWE-444
Open these records in search → All records by CVSS severity
6 39 30 6 0
THREATIST.IORead the docs