PatchTheCVEerts vulnerabilities and fixes
Recent CVEs affecting erts, with upgrade or downgrade steps. 3 tracked.
erts has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-07-27. Highest priority: CVE-2026-42792 (score 40/100).
- CVE-2026-42792 HIGH 7.5 UPGRADE UPGRADE Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated
- CVE-2026-54890 HIGH 7.5 UPGRADE UPGRADE Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts
- CVE-2026-55737 HIGH 7.5 UPGRADE UPGRADE Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacke
FAQ
How do I fix erts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is erts being exploited right now?
None of the tracked erts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which erts CVE should I patch first?
CVE-2026-42792 currently ranks highest (40/100): Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated .