What’s Vulnerable › Products

Erlang/Ssl vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Erlang/Ssl version is affected

Latest Erlang/Ssl vulnerabilities

• CVE-2026-58227 — TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain (CVSS 7.5)
• CVE-2026-55953 — TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication (CVSS 7.4)
• CVE-2026-55952 — TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension (CVSS 7.5)
• CVE-2026-55950 — DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions (CVSS 5.9)
• CVE-2026-54891 — Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl (CVSS 3.7)
• CVE-2026-54887 — DTLS server cookie bypass during startup window due to empty initial cookie secret (CVSS 4.8)
• CVE-2026-48860 — Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist (CVSS 6.5)
• CVE-2026-32144 — OCSP designated-responder authorization bypass via missing signature verification (CVSS 7.4)