PatchSiren

Erlang CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited Erlang CVE published 2025-06-09

CVE-2025-32433

CVE-2025-32433 is a vulnerability in Erlang/OTP’s SSH server that CISA has added to the Known Exploited Vulnerabilities catalog. The issue is described as a missing authentication condition for a critical function, which makes it a high-priority defensive issue for any environment running Erlang/OTP SSH services or products that embed them. CISA’s KEV entry indicates a remediation deadline of 2025-06-30 a [truncated]