Known vulnerabilities in erlang26

Known vulnerabilities in erlang26

Vendor: SUSE

Software: erlang26

Software CPE: cpe:2.3:o:suse:erlang26:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 18

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-32147	CWE-22	Low	No	No	26.2.1-150300.7.25.1	21.04.2026	SB2026042143 SB2026051961 SB2026070964 and 4 more
#VU125777 - Incorrect Authorization CVE-2026-28808	CWE-863	High	No	No	26.2.1-150300.7.25.1	10.04.2026	SB2026041031 SB2026041046 SB2026041047 and 6 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-23941	CWE-444	High	No	No	26.2.1-150300.7.25.1	10.04.2026	SB2026041022 SB2026041027 SB2026041028 and 6 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-23942	CWE-22	Low	No	No	26.2.1-150300.7.25.1	10.04.2026	SB2026041022 SB2026041027 SB2026041028 and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-23943	CWE-409	Medium	No	No	26.2.1-150300.7.25.1	10.04.2026	SB2026041022 SB2026041027 SB2026041028 and 5 more
#VU125772 - Relative Path Traversal CVE-2026-21620	CWE-23	Low	No	No	26.2.1-150300.7.25.1	10.04.2026	SB2026041021 SB2026041023 SB2026041024 and 6 more
#VU117393 - Resource exhaustion CVE-2025-48041	CWE-400	Medium	No	No	26.2.1-150300.7.19.1	20.10.2025	SB2025102052 SB2025102180 SB2025102745 and 3 more
#VU117392 - Uncontrolled Recursion CVE-2025-48040	CWE-674	Medium	No	No	26.2.1-150300.7.22.1	20.10.2025	SB2025102052 SB2025102180 SB20260105126 and 5 more
#VU117391 - Resource exhaustion CVE-2025-48039	CWE-400	Medium	No	No	26.2.1-150300.7.22.1	20.10.2025	SB2025102052 SB2025102180 SB20260105126 and 7 more
#VU117390 - Resource exhaustion CVE-2025-48038	CWE-400	Medium	No	No	26.2.1-150300.7.22.1	20.10.2025	SB2025102052 SB2025102054 SB2025102055 and 6 more
#VU107594 - Missing Authentication for Critical Function CVE-2025-32433	CWE-306	Critical	Available	Exploited	26.2.1-150300.7.11.1	17.04.2025	SB2025041757 SB2025041763 SB2025042002 and 9 more
#VU106951 - Uncontrolled Memory Allocation CVE-2025-26618	CWE-789	Medium	No	No	26.2.1-150300.7.8.1	03.04.2025	SB2025040369 SB2025040384 SB2025040385 and 6 more
#VU106381 - Uncontrolled Memory Allocation CVE-2025-30211	CWE-789	High	No	No	26.2.1-150300.7.11.1	02.04.2025	SB2025040211 SB20250403109 SB20250403110 and 7 more
#VU82551 - Resource exhaustion CVE-2023-46118	CWE-400	Low	No	No	26.2.1-150300.7.5.1	30.10.2023	SB2023103008 SB2023112152 SB2023120201 and 3 more
#VU69263 - Use of Insufficiently Random Values CVE-2022-31008	CWE-330	Medium	No	No	26.2.1-150300.7.5.1	13.11.2022	SB2022111301 SB2022120859 SB2023101769 and 1 more
#VU54450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-32718	CWE-79	Low	No	No	26.2.1-150300.7.5.1	30.06.2021	SB2021063001 SB2021070609 SB2021101002 and 5 more
#VU54421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-32719	CWE-79	Low	No	No	26.2.1-150300.7.5.1	28.06.2021	SB2021062815 SB2021070609 SB2021101002 and 4 more
#VU53724 - Improper input validation CVE-2021-22116	CWE-20	Medium	No	No	26.2.1-150300.7.5.1	01.06.2021	SB2021060141 SB2021060142 SB2021101002 and 3 more