Known vulnerabilities in erlang-tftp

Vendor: openEuler

Software: erlang-tftp

Software CPE: cpe:2.3:o:openeuler:erlang-tftp:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 33

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (33)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU146827 - Improper Handling of Exceptional Conditions CVE-2026-42792	CWE-755	Medium	No	No	25.3.2.6-19	02.09.2026	SB20260902104 SB20260902107 SB20260902108 and 4 more
#VU146825 - Signed to Unsigned Conversion Error CVE-2026-55737	CWE-195	Low	No	No	25.3.2.6-19	02.09.2026	SB20260902104 SB20260902107 SB20260902108 and 4 more
#VU146824 - Selection of Less-Secure Algorithm During Negotiat CVE-2026-55953	CWE-757	High	No	No	25.3.2.6-19	02.09.2026	SB20260902104 SB20260902105 SB20260902106 and 9 more
#VU146823 - Out-of-bounds write CVE-2026-59250	CWE-787	High	No	No	25.3.2.6-19	02.09.2026	SB20260902104 SB20260902107 SB20260902108 and 4 more
#VU146822 - Uncontrolled Recursion CVE-2026-58227	CWE-674	Medium	No	No	25.3.2.6-19	02.09.2026	SB20260902104 SB20260902107 SB20260902108 and 5 more
#VU136828 - Observable Response Discrepancy CVE-2026-53422	CWE-204	Low	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070297 SB2026071924 SB2026071925 and 5 more
#VU136827 - Use of Default Cryptographic Key CVE-2026-54887	CWE-1394	Low	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070297 SB2026071924 SB2026071925 and 5 more
#VU136826 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-54886	CWE-835	Low	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070297 SB2026071054 SB2026071055 and 7 more
#VU136825 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel CVE-2026-54891	CWE-924	Medium	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070297 SB2026071054 SB2026071055 and 7 more
#VU136824 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-55950	CWE-367	Medium	No	No	25.3.2.6-18	02.07.2026	SB2026070297 SB2026071924 SB2026071926 and 3 more
#VU136823 - Improper Validation of Specified Quantity in Input CVE-2026-55952	CWE-1284	Medium	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070297 SB2026071054 SB2026071055 and 7 more
#VU136821 - Exposure of sensitive information to an unauthorized actor CVE-2026-48855	CWE-200	Low	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070296 SB2026070301 SB2026070302 and 7 more
#VU136820 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-48856	CWE-601	Medium	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070296 SB2026071924 SB2026071925 and 5 more
#VU136818 - Server-Side Request Forgery (SSRF) CVE-2026-48858	CWE-918	Low	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070296 SB2026071054 SB2026071055 and 7 more
#VU136817 - Stack-based buffer overflow CVE-2026-49759	CWE-121	Medium	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070296 SB2026071054 SB2026071055 and 7 more
#VU136816 - Stack-based buffer overflow CVE-2026-49760	CWE-121	Medium	No	No	23.3.4.9-11, 25.3.2.6-18	02.07.2026	SB2026070296 SB2026071924 SB2026071925 and 5 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-32147	CWE-22	Low	No	No	25.3.2.6-16, 25.3.2.6-17, 25.3.2.6-18	21.04.2026	SB2026042143 SB2026051961 SB2026070964 and 5 more
#VU125777 - Incorrect Authorization CVE-2026-28808	CWE-863	High	No	No	25.3.2.6-15	10.04.2026	SB2026041031 SB2026041046 SB2026041047 and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-23943	CWE-409	Medium	No	No	23.3.4.9-10, 25.3.2.6-13	10.04.2026	SB2026041022 SB2026041027 SB2026041028 and 5 more
#VU125772 - Relative Path Traversal CVE-2026-21620	CWE-23	Low	No	No	23.3.4.9-10, 25.3.2.6-15, 25.3.2.6-17	10.04.2026	SB2026041021 SB2026041023 SB2026041024 and 6 more

Showing elements 1 - 20 out of 33

Known vulnerabilities in erlang-tftp

Breakdown by Severity Chart

Vulnerabilities (33)

Please verify you're human