OT
Product
otp
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 1
Watch
Add otp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32433 In wildKEV | 10.0 | Apr 16 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE Affected: >= OTP-27.0-rc1, < OTP-27.3.3; >= OTP-26.0-rc1, < OTP-26.2.5.11; < OTP-25.3.2.20 |
| CVE-2025-30211 | 7.5 | Mar 28 | KEX init error results with excessive memory usage Affected: < OTP-27.3.1; < OTP-26.2.5.10; < OTP-25.3.2.19 |
| CVE-2025-26618 | 7.0 | Feb 20 | SSH SFTP packet size not verified properly in Erlang OTP Affected: >= OTP-27.0.0, < OTP-27.2.4; >= OTP-26.0.0.0, < OTP-26.2.5.9; < OTP-25.3.2.18 |
| CVE-2024-53846 | 5.5 | Dec 5 | ssl fails to validate incorrect extened key usage Affected: >= 25.3.2.8, <= 25.3.2.16; >= 26.2, <= 26.2.5.6; >= 27.0, <= 27.1.3 |
| CVE-2025-46712 | 3.7 | May 8 | Erlang/OTP SSH Has Strict KEX Violations Affected: >= OTP 27.0, < OTP 27.3.4; >= OTP 26.2.1, < OTP 26.2.5.12; < OTP 25.3.2.21 |
Showing 5