Erlang/inets vulnerabilities

2 known vulnerabilities in Erlang/inets from Erlang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OTP: Incorrect Authorization

  CVE-2026-28808Apr 7, 2026Erlang

  Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias. When script_alias maps a URL prefix to a directory outside DocumentRoot, mod_auth evalua

• 9.4 Critical severity

  OTP: Inconsistent Interpretation of HTTP Requests

  CVE-2026-23941Mar 13, 2026Erlang

  Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is associated with program files lib/inets/src/http_server/httpd_request.erl and program