The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade erlang | Aug 8, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade erlang | Apr 21, 2025 | Apr 16, 2025 |
| Freebsd | — | Upgrade erlang-runtime21Upgrade erlang-runtime24Upgrade erlang-runtime25Upgrade erlang-runtime27Upgrade erlang-runtime26Upgrade erlang-runtime22Upgrade erlang-runtime23Upgrade erlang | Apr 22, 2025 | Apr 20, 2025 |
| Suse | — | Upgrade erlang-wxUpgrade erlang26-docUpgrade erlangUpgrade erlang26-epmdUpgrade erlang26-wx-srcUpgrade erlang26-dialyzerUpgrade erlang26-diameter-srcUpgrade erlang-observerUpgrade erlang26-srcUpgrade erlang-wx-srcUpgrade erlang-debuggerUpgrade erlang-debugger-srcUpgrade erlang-observer-srcUpgrade erlang-srcUpgrade erlang-jinterfaceUpgrade erlang26-debuggerUpgrade erlang-et-srcUpgrade erlang26-diameterUpgrade erlang26-etUpgrade erlang26-wxUpgrade erlang-etUpgrade erlang-docUpgrade erlang26-debugger-srcUpgrade erlang-dialyzerUpgrade erlang-reltoolUpgrade erlang-epmdUpgrade erlang-diameterUpgrade erlang26-observer-srcUpgrade erlang-jinterface-srcUpgrade erlang26-et-srcUpgrade erlang26-observerUpgrade erlang-reltool-srcUpgrade erlang26-jinterface-srcUpgrade erlang-dialyzer-srcUpgrade erlang26-dialyzer-srcUpgrade erlang-diameter-srcUpgrade erlang26-reltool-srcUpgrade erlang26-reltoolUpgrade erlang26-jinterfaceUpgrade erlang26 | Dec 5, 2025 | Apr 22, 2025 |
| Ubuntu | — | Upgrade erlang-ssh (Ubuntu Pro)Upgrade erlang-sshUpgrade erlang (Ubuntu Pro)Upgrade erlang | Apr 21, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub