Erlang Erlang/inets — known CVE vulnerabilities

Every CVE whose affected-product data names Erlang Erlang/inets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-28808 — CVSS 9.8 (critical): Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory…
• CVE-2026-23941 — CVSS 9.4 (critical): Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP…
• CVE-2026-48856 — CVSS 6.5 (medium): Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. The httpc client…
• CVE-2026-48858 — CVSS 6.5 (medium): Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an…