Linux Distros Unpatched Vulnerability : CVE-2026-70399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of servic...

PT-2026-85081

A vulnerability in MISP's email-based one-time password OTP authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The email otp endpoint did not apply brute-force protection when validating submitted OTP values. An attacker who had reached the OTP...

Linux Distros Unpatched Vulnerability : CVE-2026-75538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length...

Linux Distros Unpatched Vulnerability : CVE-2026-74994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collaps...

Linux Distros Unpatched Vulnerability : CVE-2026-73276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before...

Linux Distros Unpatched Vulnerability : CVE-2026-59696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose...

Linux Distros Unpatched Vulnerability : CVE-2026-74835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP...

CVE-2026-69664

A flaw was found in Erlang/OTP inets httpd. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed chunked HTTP request. Specifically, if the chunk-size line is not a hexadecimal number and arrives separately from the headers, the server worker handling the reque...

CVE-2026-74835

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:38+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-75538

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:36+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-73270

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:34+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-66835

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:31+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-66357

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:27+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-70399

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:25+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-71380

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:22+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-55951

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:20+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-73276

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:18+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-73812

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:16+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

SUSE CVE-2026-55951

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The maxheadersize option defaults to nolimit, and httpcresponse:parseheaders/6 accumulates every header into a list before the length check runs which only fires after the...

SUSE CVE-2026-59696

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uristring:getport/1 passes the port substring to binarytointeger/1 with no length bound,...