DeutschShown in its original language — a full translation is planned for a future version.
Erlang/OTP: Mehrere Schwachstellen
view advisory published 2026-04-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Erlang/OTP ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-32144US | high7.4 | — | ||
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification… | ||||
| CVE-2026-28808US | critical9.8OT elevated | — | ||
Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.
When sc… | ||||
| CVE-2026-28810US | low3.7 | — | ||
Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows DNS Cache Poisoning.
The built-in DNS resolver (inet_res) us… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Bugtracker #2455868 vom 2026-04-07external
- Red Hat Bugtracker #2455896 vom 2026-04-07external
- Red Hat Bugtracker #2455909 vom 2026-04-07external
- GitHub Security Advisory GHSA-3vhp-h532-mc3f vom 2026-04-07external
- GitHub Security Advisory GHSA-gxrm-pf64-99xm vom 2026-04-07external
- GitHub Security Advisory GHSA-v884-5jg5-whj8 vom 2026-04-07external
- openSUSE Security Update OPENSUSE-SU-2026:20607-1 vom 2026-04-23external
- openSUSE Security Update OPENSUSE-SU-2026:10947-1 vom 2026-06-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan