What’s Vulnerable › Products

Erlang/Inets vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Erlang/Inets version is affected

Latest Erlang/Inets vulnerabilities

• CVE-2026-48858 — ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks (CVSS 6.5)
• CVE-2026-48856 — httpc leaks Authorization header to cross-origin redirect targets (CVSS 6.5)
• CVE-2026-28808 — ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) (CVSS 9.8)
• CVE-2026-23941 — Request smuggling via first-wins Content-Length parsing in inets httpd (CVSS 9.4)