Known vulnerabilities in erlang (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:erlang_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 33
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting erlang (Ubuntu package) erlang (Ubuntu package) is affected by 33 known vulnerabilities: 1 critical, 9 high, 21 medium, 2 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146843 - Improper Validation of Specified Quantity in Input
CVE-2026-59696
CWE-1284 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146842 - Allocation of Resources Without Limits or Throttling
CVE-2026-55951
CWE-770 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146840 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-73812
CWE-444 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026101445
#VU146839 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-66357
CWE-444 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146838 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-73276
CWE-444 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146837 - Missing Release of Resource after Effective Lifetime
CVE-2026-71380
CWE-772 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146836 - Improper Handling of Case Sensitivity
CVE-2026-73270
CWE-178 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 5 more
#VU146835 - Path Equivalence: \'//multiple/leading/slash\'
CVE-2026-66835
CWE-50 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146834 - Heap-based Buffer Overflow
CVE-2026-75538
CWE-122 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 5 more
#VU146832 - Improper Validation of Specified Quantity in Input
CVE-2026-70409
CWE-1284 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146831 - Improper Validation of Specified Quantity in Input
CVE-2026-70405
CWE-1284 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146830 - Missing Release of Resource after Effective Lifetime
CVE-2026-69664
CWE-772 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146828 - Allocation of Resources Without Limits or Throttling
CVE-2026-70399
CWE-770 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902111
SB2026092979
SB2026100177
and 3 more
#VU146825 - Signed to Unsigned Conversion Error
CVE-2026-55737
CWE-195 Low
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 7 more
#VU146824 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-55953
CWE-757 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902105
SB20260902106
and 12 more
#VU146823 - Out-of-bounds write
CVE-2026-59250
CWE-787 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 6 more
#VU146822 - Uncontrolled Recursion
CVE-2026-58227
CWE-674 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 8 more
#VU146821 - Allocation of Resources Without Limits or Throttling
CVE-2026-59251
CWE-770 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902108
SB20260902112
and 3 more
#VU146820 - Integer underflow
CVE-2026-54890
CWE-191 Medium
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 02.09.2026 SB20260902104
SB20260902108
SB2026092979
and 1 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941
CWE-444 High
No
No
1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 7 more


Showing elements 1 - 20 out of 33