Erlang vulnerabilities
67 CVEs and advisories name Erlang as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-96596erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
- CVE-2026-105236TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries
- CVE-2026-94200TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl
- CVE-2026-105274hex_core decompresses registry and Erlang term API responses without size limits
- CVE-2026-103060Path traversal in rebar3 via unvalidated dependency app names
- CVE-2026-65634Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
- CVE-2026-68956SSH daemon allocates unbounded idle session channels, bypassing max_channels
- CVE-2026-89422TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
- CVE-2026-69664httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
- CVE-2026-70409eldap does not bound the port component of a referral URL before integer conversion
- CVE-2026-70405snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields
- CVE-2026-66835httpd mod_auth directory protection bypassed by a doubled slash in the request path
- CVE-2026-73270httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
- CVE-2026-75538A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer
- CVE-2026-74994inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
- CVE-2026-74835inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
- CVE-2026-73812inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
- CVE-2026-73276inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
- CVE-2026-66357inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
- CVE-2026-59696uri_string does not bound the port component of a URI before integer conversion
- CVE-2026-55951httpc memory exhaustion via unbounded response header accumulation
- CVE-2026-71380httpd applies no timeout while receiving a request body, parking a worker on a stalled client
- CVE-2026-71562httpc does not bound server-supplied numeric header values before integer conversion
- CVE-2026-70399httpd does not enforce the documented default max_clients connection limit
- CVE-2026-54890BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding
- CVE-2026-59251Denial of service via exponential certificate policy tree growth in path validation
- CVE-2026-59250Megaco flex scanner buffer overflow via oversized property parm name
- CVE-2026-55953TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
- CVE-2026-55737Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
- CVE-2026-47078Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass