DeutschShown in its original language — a full translation is planned for a future version.
Erlang/OTP: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
view advisory published 2026-05-27
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Erlang/OTP ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-42790US | high8.1 | — | ||
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in T… | ||||
| CVE-2026-42791US | low3.7 | — | ||
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows forged OCSP responses signed with an expired responder certificate to be accepted… | ||||
| CVE-2026-42789US | medium4.8 | — | ||
Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issue… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:39809 vom 2026-07-15external
- Red Hat Security Advisory RHSA-2026:54757 vom 2026-08-14external
- GitHub Security Advisory GHSA-22cw-4ph4-6447 vom 2026-05-27external
- GitHub Security Advisory GHSA-c99q-jmpx-v8qq vom 2026-05-27external
- GitHub Security Advisory GHSA-cjxj-wj6x-3fff vom 2026-05-27external
- openSUSE Security Update OPENSUSE-SU-2026:10947-1 vom 2026-06-07external
- SUSE Security Update SUSE-SU-2026:3579-1 vom 2026-08-12external
- SUSE Security Update SUSE-SU-2026:22082-1 vom 2026-06-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan