Product by Erlang

    Erlang\/ssh

    7 known vulnerabilities in Erlang\/ssh (Erlang), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Erlang\/ssh (Erlang)
    MediumCVE-2026-23943

    Pre-auth SSH DoS via unbounded zlib inflate

    also in 4 other products

    		5.3
    MediumCVE-2026-32147

    SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT

    also in 4 other products

    		4.3
    MediumCVE-2026-48859

    Erlang OTP: Observable Timing Discrepancy

    also in 8 other products

    		5.3
    MediumCVE-2026-48855

    SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

    also in 9 other products

    		6.5
    MediumCVE-2026-54886

    SSH SFTP server denial of service via extended channel data infinite loop

    also in 4 other products

    		4.3
    MediumCVE-2026-23942

    SFTP root escape via component-agnostic prefix check in ssh_sftpd

    also in 4 other products

    		5.4
    MediumCVE-2026-53422

    SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

    also in 4 other products

    		4.3

    All products by Erlang