What’s Vulnerable › Products

Erlang/Ssh vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Erlang/Ssh version is affected

Latest Erlang/Ssh vulnerabilities

• CVE-2026-54886 — SSH SFTP server denial of service via extended channel data infinite loop (CVSS 4.3)
• CVE-2026-53422 — SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root (CVSS 4.3)
• CVE-2026-48859 — SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration (CVSS 5.3)
• CVE-2026-48855 — SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured (CVSS 6.5)
• CVE-2026-32147 — SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT (CVSS 4.3)
• CVE-2026-23943 — Pre-auth SSH DoS via unbounded zlib inflate (CVSS 5.3)
• CVE-2026-23942 — SFTP root escape via component-agnostic prefix check in ssh_sftpd (CVSS 5.4)