Known vulnerabilities in Erlang OTP - page 2

Vendor: erlang
Software: Erlang OTP
Software CPE: cpe:2.3:a:erlang:otp:*:*:*:*:*:*:*:*
Total vulnerabilities: 67
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Erlang OTP Erlang OTP is affected by 67 known vulnerabilities: 1 critical, 11 high, 39 medium, 16 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146823 - Out-of-bounds write
CVE-2026-59250
CWE-787 High
No
No
27.3.4.15, 28.5.0.4, 29.0.4 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146822 - Uncontrolled Recursion
CVE-2026-58227
CWE-674 Medium
No
No
27.3.4.15, 28.5.0.4, 29.0.4 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146821 - Allocation of Resources Without Limits or Throttling
CVE-2026-59251
CWE-770 Medium
No
No
27.3.4.15, 28.5.0.4, 29.0.4 02.09.2026 SB20260902104
SB20260902108
SB20260902112
#VU146820 - Integer underflow
CVE-2026-54890
CWE-191 Medium
No
No
27.3.4.15, 28.5.0.4, 29.0.4 02.09.2026 SB20260902104
SB20260902108
#VU136828 - Observable Response Discrepancy
CVE-2026-53422
CWE-204 Low
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 5 more
#VU136827 - Use of Default Cryptographic Key
CVE-2026-54887
CWE-1394 Low
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 5 more
#VU136826 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54886
CWE-835 Low
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136825 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2026-54891
CWE-924 Medium
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136824 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-55950
CWE-367 Medium
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071924
SB2026071926
and 3 more
#VU136823 - Improper Validation of Specified Quantity in Input
CVE-2026-55952
CWE-1284 Medium
No
No
27.3.4.14, 28.5.0.3, 29.0.3 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136822 - Information Exposure Through Timing Discrepancy
CVE-2026-48859
CWE-208 Medium
No
No
29.0.2 02.07.2026 SB2026070296
#VU136821 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48855
CWE-200 Low
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026070301
SB2026070302
and 7 more
#VU136820 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48856
CWE-601 Medium
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 5 more
#VU136819 - Comparison using wrong factors
CVE-2026-48860
CWE-1025 Low
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 2 more
#VU136818 - Server-Side Request Forgery (SSRF)
CVE-2026-48858
CWE-918 Low
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 7 more
#VU136817 - Stack-based buffer overflow
CVE-2026-49759
CWE-121 Medium
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 7 more
#VU136816 - Stack-based buffer overflow
CVE-2026-49760
CWE-121 Medium
No
No
27.3.4.13, 28.5.0.2, 29.0.2 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 5 more
#VU136815 - Improper Certificate Validation
CVE-2026-42791
CWE-295 Medium
No
No
27.3.4.12, 28.5.0.1, 29.0.1 02.07.2026 SB2026070295
SB20260902104
#VU136814 - Improper Certificate Validation
CVE-2026-42789
CWE-295 Low
No
No
26.2.5.21, 27.3.4.12, 28.5.0.1, 29.0.1 02.07.2026 SB2026070295
SB2026071567
SB20260902104
and 2 more
#VU136813 - Improper Validation of Certificate with Host Mismatch
CVE-2026-42790
CWE-297 Medium
No
No
26.2.5.21, 27.3.4.12, 28.5.0.1, 29.0.1 02.07.2026 SB2026070295
SB2026071567
SB20260902104
and 2 more


Showing elements 21 - 40 out of 67