ER
Product
Erlang/ssl
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 1
Watch
Add Erlang/ssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58227 | 7.5 | Jul 27 | TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain Affected: 10.2 before 11.2.12.11; 11.3 before 11.6.0.4; 11.7 before 11.7.4 |
| CVE-2026-55952 | 7.5 | Jul 2 | TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension Affected: 9.5 before 11.2.12.10; 11.3 before 11.6.0.3; 11.7 before 11.7.3 |
| CVE-2026-55953 | 7.4 | Jul 27 | TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication Affected: 5.3.4 before 11.2.12.11; 11.3 before 11.6.0.4; 11.7 before 11.7.4 |
| CVE-2026-32144 | 7.4 | Apr 7 | OCSP designated-responder authorization bypass via missing signature verification Affected: 11.2 before 11.2.12.7; after 11.3 before 11.5.4 |
| CVE-2026-48860 | 6.5 | Jun 10 | Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist Affected: 11.0 before 11.2.12.9; 11.6 before 11.6.0.2; 11.7 before 11.7.2 |
| CVE-2026-55950 | 5.9 | Jul 2 | DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions Affected: 10.9 before 11.2.12.10; 11.3 before 11.6.0.3; 11.7 before 11.7.3 |
| CVE-2026-54887 | 4.8 | Jul 2 | DTLS server cookie bypass during startup window due to empty initial cookie secret Affected: 8.2 before 11.2.12.10; 11.3 before 11.6.0.3; 11.7 before 11.7.3 |
| CVE-2026-54891 | 3.7 | Jul 2 | Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Affected: 5.3.4 before 11.2.12.10; 11.3 before 11.6.0.3; 11.7 before 11.7.3 |
Showing 8