Erlang

Records81All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high39CVSS 7.0–8.9

Exploited now

Erlang records in CISA KEV

TI-2025-23504 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2025-06-09

Components

Products in the NVD configurations · select one to filter the records

Erlang/otp 41 records CRITICAL Erlang/ssl 8 records MEDIUM Erlang/ssh 7 records LOW Erlang/inets 4 records MEDIUM Erts 4 records MEDIUM Rebar3 3 records MEDIUM Erlang/public Key 2 records MEDIUM Crypto 1 record MEDIUM

Records

2 records in Erlang/public Key · all components

TI-2026-42391 CVE-2026-59251

Denial of service via exponential certificate policy tree growth in path validation

MEDIUM 44

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00319 Published 2026-07-27 Fixed CWE-770

TI-2026-24681 CVE-2026-32144

OCSP designated-responder authorization bypass via missing signature verification

LOW 35

Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00207 Published 2026-04-07 No fix listed CWE-295

Open these records in search →

Critical	6
High	39
Medium	30
Low	6
No CVSS	0