ER
Product
Erlang/inets
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch
Add Erlang/inets to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28808 | 9.8 | Apr 7 | ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) Affected: 5.10 before 9.1.0.6; after 9.2 before 9.3.2.4; after 9.4 before 9.6.2 |
| CVE-2026-23941 | 9.4 | Mar 13 | Request smuggling via first-wins Content-Length parsing in inets httpd Affected: 5.10 before 9.1.0.5; 9.3 before 9.3.2.3; 9.6 before 9.6.1 |
| CVE-2026-48856 | 6.5 | Jun 10 | httpc leaks Authorization header to cross-origin redirect targets Affected: 5.10 before 9.3.2.6; 9.6 before 9.6.2.2; 9.7 before 9.7.1 |
| CVE-2026-48858 | 6.5 | Jun 10 | ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks Affected: 5.10.4 before 7.0 |
Showing 4