The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade erlang | Aug 8, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade erlang | Apr 21, 2025 | Apr 16, 2025 |
| Freebsd | — | Upgrade erlang-runtime22Upgrade erlangUpgrade erlang-runtime24Upgrade erlang-runtime25Upgrade erlang-runtime23Upgrade erlang-runtime27Upgrade erlang-runtime26Upgrade erlang-runtime21 | Apr 22, 2025 | Apr 20, 2025 |
| Suse | — | Upgrade erlang26-observer-srcUpgrade erlang-dialyzer-srcUpgrade erlang26-debugger-srcUpgrade erlang26-et-srcUpgrade erlang-docUpgrade erlang26Upgrade erlang-diameterUpgrade erlang-etUpgrade erlang26-wxUpgrade erlang-dialyzerUpgrade erlang-jinterface-srcUpgrade erlang-reltoolUpgrade erlang-epmdUpgrade erlang26-jinterface-srcUpgrade erlang26-jinterfaceUpgrade erlang26-dialyzer-srcUpgrade erlang26-observerUpgrade erlang26-reltoolUpgrade erlang26-reltool-srcUpgrade erlang-reltool-srcUpgrade erlang-diameter-srcUpgrade erlang-jinterfaceUpgrade erlang-srcUpgrade erlang-wx-srcUpgrade erlang26-srcUpgrade erlang26-debuggerUpgrade erlang26-wx-srcUpgrade erlang26-dialyzerUpgrade erlang-observerUpgrade erlang-debuggerUpgrade erlang26-diameter-srcUpgrade erlang26-etUpgrade erlang-observer-srcUpgrade erlang26-diameterUpgrade erlang-et-srcUpgrade erlang-wxUpgrade erlang-debugger-srcUpgrade erlang26-docUpgrade erlangUpgrade erlang26-epmd | Dec 5, 2025 | Apr 22, 2025 |
| Ubuntu | — | Upgrade erlangUpgrade erlang (Ubuntu Pro)Upgrade erlang-ssh (Ubuntu Pro)Upgrade erlang-ssh | Apr 21, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub