Login Request a demo
OT
Product
OTP
by Erlang · last CVE Oct 14, 2026
On CISA KEVExploited in the wild
65
CVEs
1
On KEV
10.0
Max CVSS
3
New 30D
Vulnerabilities65In the news1Timeline
Severity mix
Critical 6High 28Medium 26Low 3
Severity
All severities65Critical6High28Medium26Low3
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add OTP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-32433
In wildKEV
10.0
99%
Apr 16
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Affected: before 25.3.2.20; 26.0 before 26.2.5.11; 27.0 before 27.3.3
CVE-2026-28808
9.8
1%
Apr 7
ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)
Affected: 17.0; 5.10; 07b8f441ca711f9812fad9e9115bab3c3aa92f79
CVE-2022-37026
9.8
1%
Sep 21
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and…
Affected: before 23.3.4.15; 24.0 before 24.3.4.2; 25.0 before 25.0.2
CVE-2016-10253
9.8
1%
Mar 18
An issue was discovered in Erlang/OTP 18.x
Affected: 18.0; 18.0; 18.0; 18.0.1; 18.0.2; 18.0.3; +34 more
CVE-2026-23941
9.4
0%
Mar 13
Request smuggling via first-wins Content-Length parsing in inets httpd
Affected: 5.10; 17.0; 84adefa331c4159d432d22840663c38f155cd4c1
CVE-2026-89422
9.3
0%
Sep 22
TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
Affected: 22.2; 9.5; 21b8a1b0ad0adf200682b3854bc50114ab2b8c62
Showing 6