OT
Product
OTP
On CISA KEVExploited in the wild
65
CVEs
1
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 6High 28Medium 26Low 3
Watch
Add OTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59696 | 6.9 | Sep 1 | uri_string does not bound the port component of a URI before integer conversion Affected: 21.0 before 27.3.4.17; 28.0 before 28.5.0.6; 29.0 before 29.0.6; 3.5 before 6.2.2.5; 7.0 before 7.3.0.2; 8.0 before 8.0.4; +1 more |
| CVE-2026-48856 | 6.5 | Jun 10 | httpc leaks Authorization header to cross-origin redirect targets Affected: 17.0; 5.10; 84adefa331c4159d432d22840663c38f155cd4c1 before f78fae9294886f95545a2212671282eda230def1 |
| CVE-2026-48860 | 6.5 | Jun 10 | Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist Affected: 26.0; 11.0; 7a08c5507862a7011568506d0c17b1fdef30bee4 before 0209a6df65d605552b378273027b3968b35f26b4 |
| CVE-2026-48855 | 6.5 | Jun 10 | SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured Affected: 17.0; 3.0.1; 08225797f7ef943d0c82a1d9dd6650d94ca2580d before 8f4224a0d2676b0653d2c71a889a956e8c2c62d6 |
| CVE-2026-48858 | 6.5 | Jun 10 | ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks Affected: 5.10.4 before 7.0; 1.0; 17.4; be95772ee1fcfe71045ef070130bea7a910b81e3 |
| CVE-2026-105236 | 6.3 | Oct 14 | TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries Affected: 18.0; 7.0; 4fe38c4b8b2c8024afb60990e598ff823743fd54 |
| CVE-2026-70409 | 6.3 | Sep 1 | eldap does not bound the port component of a referral URL before integer conversion Affected: 17.0 before 27.3.4.17; 28.0 before 28.5.0.6; 29.0 before 29.0.6; 1.0.3 before 1.2.14.2; 1.2.15 before 1.2.16.1; 1.3 before 1.3.1; +1 more |
| CVE-2026-70405 | 6.3 | Sep 1 | snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields Affected: 17.0 before 27.3.4.17; 28.0 before 28.5.0.6; 29.0 before 29.0.6; 4.25.1 before 5.18.2.1; 5.19 before 5.20.2.2; 5.20.3 before 5.20.5; +1 more |
| CVE-2026-71562 | 6.3 | Sep 1 | httpc does not bound server-supplied numeric header values before integer conversion Affected: 17.0 before 27.3.4.17; 28.0 before 28.5.0.6; 29.0 before 29.0.6; 5.10 before 9.3.2.7; 9.4 before 9.6.2.3; 9.7 before 9.7.2; +1 more |
| CVE-2016-1000107 | 6.1 | Dec 10 | inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: through 22.1 |
| CVE-2026-74994 | 6.0 | Sep 1 | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth Affected: 17.0 before 27.3.4.17; 28.0 before 28.5.0.6; 29.0 before 29.0.6; 5.10 before 9.3.2.7; 9.4 before 9.6.2.3; 9.7 before 9.7.2; +1 more |
| CVE-2026-96596 | 5.9 | Oct 14 | erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole Affected: 29.0 before 29.1.2; 8.0 before 8.1.1; fbf2c7194f6fce4b7b66dc0bcaa4f6b4b85e088f before 3086307f311b78b38644a7787a3aca6a3f95a9d5 |
| CVE-2026-55950 | 5.9 | Jul 2 | DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions Affected: 10.9; 25.3; 44dcb4c3d900777493ce2a6129f451aa475811f9 before e44d2bf01c4473ef2ea7f09e3523cf96de6e4a04 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 22.3.4.27; 23.0 before 23.3.4.20; 24.0 before 24.3.4.15; 25.0 before 25.3.2.8; 26.0 before 26.2.1 |
| CVE-2017-1000385 | 5.9 | Dec 12 | The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding Affected: 18.3.4.7; 19.3.6.4; 20.1.7 |
| CVE-2015-2774 | 5.9 | Apr 7 | Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data… Affected: through 18.0 |
| CVE-2026-49760 | 5.5 | Jun 10 | Stack Buffer Overflow in ei_s_print_term at Very Large Integer Affected: 17.0; 3.7.16; 84adefa331c4159d432d22840663c38f155cd4c1 before 0bef277b2d39dc8babb9ceb4f5d0a456f3007111 |
| CVE-2026-23942 | 5.4 | Mar 13 | SFTP root escape via component-agnostic prefix check in ssh_sftpd Affected: 3.0.1; 17.0; 84adefa331c4159d432d22840663c38f155cd4c1 |
| CVE-2026-48859 | 5.3 | Jun 10 | SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration Affected: 29.0 before 29.0.2; 6.0 before 6.0.1; 032d1bc9491a3975c68faf9bc7776115d6ae3005 before c342092ef4b369bb409d5b71ac8fd83bab74aedf |
| CVE-2026-23943 | 5.3 | Mar 13 | Pre-auth SSH DoS via unbounded zlib inflate Affected: 3.0.1; 17.0; 07b8f441ca711f9812fad9e9115bab3c3aa92f79 |
| CVE-2026-47078 | 4.8 | Jul 27 | Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass Affected: 27.1; 6.1; 8d537f51a4262d24f3395c4148323eaca9facbbd before 8a933c9c7835b06776d31d17b79b7336627d887a |
| CVE-2026-54887 | 4.8 | Jul 2 | DTLS server cookie bypass during startup window due to empty initial cookie secret Affected: 8.2; 20.0; e594aad2f87aab39e99fccf9e021bc94e0bbf7d4 before 888e3bcd72d5406016b9e0de741026bc2a6f114d |
| CVE-2026-42789 | 4.8 | May 27 | Non-CA certificate accepted as intermediate issuer in public_key path validation Affected: 17.0; 0.22; 84adefa331c4159d432d22840663c38f155cd4c1 |
| CVE-2026-54886 | 4.3 | Jul 2 | SSH SFTP server denial of service via extended channel data infinite loop Affected: 3.0.1; 17.0; 84adefa3318eef8631bf25cd233246a86eea18cd before eaf9550b8ad4738b81149d3f617102d980c6dd18 |
| CVE-2026-53422 | 4.3 | Jul 2 | SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root Affected: 3.0.1; 17.0; 84adefa331c4159d432d22840663c38f155cd4c1 |
| CVE-2026-32147 | 4.3 | Apr 21 | SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT Affected: 3.01; 17.0; 07b8f441ca711f9812fad9e9115bab3c3aa92f79 |
Showing 26