OESA-2026-1665 erlang security update

🗓️ 20 Mar 2026 14:24:52Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

OESA-2026-1665 fixes HTTP request smuggling in inets httpd and path traversal in ssh_sftpd.

Reporter	Title	Published	Views	Family All 92
IBM Security Bulletins	Security Bulletin:Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP	1 Jun 202606:11	–	ibm
IBM Security Bulletins	Security Bulletin: Erlang OTP inets httpd Vulnerable to HTTP Request Smuggling via Duplicate Content-Length Headers	18 May 202606:35	–	ibm
IBM Security Bulletins	Security Bulletin: Erlang OTP inets httpd HTTP Request Smuggling via Duplicate Content-Length Handling	14 May 202606:23	–	ibm
ATTACKERKB	CVE-2026-23943	13 Mar 202609:11	–	attackerkb
ATTACKERKB	CVE-2026-23941	13 Mar 202609:11	–	attackerkb
ATTACKERKB	CVE-2026-23942	13 Mar 202609:11	–	attackerkb
CBLMariner	CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5	18 Mar 202615:31	–	cbl_mariner
CBLMariner	CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5	18 Mar 202615:31	–	cbl_mariner
CBLMariner	CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5	18 Mar 202615:31	–	cbl_mariner
CBLMariner	CVE-2026-23942 affecting package erlang for versions less than 26.2.5.18-1	19 Mar 202612:05	–	cbl_mariner

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23941
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23942
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23943

20 Mar 2026 14:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.4

CVSS 47

EPSS0.00065

SSVC

http request smuggling path traversal