CVE-2025-32433 Erlang Erlang/OTP
Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a…
- CVSS
- not scored
On CISA’s exploited list
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
- Added
- 2025-06-09
- Federal patch deadline
- 2025-06-30
- Ransomware use
- not known