Critical Denial of Service and Auth Bypass Vulnerabilities in Fedora Erlang

Fedora has issued backport fixes for multiple vulnerabilities in Erlang affecting versions 26.x and 27.x. Key vulnerabilities include CVE-2026-48858 (SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (auth bypass), CVE-2026-54886 (SFTP DoS), CVE-2026-54891 (TLS handshake injection), and CVE-2026-55952 (TLS 1.3 session ticket DoS). These vulnerabilities could allow attackers to execute arbitrary code or cause service disruptions. The vulnerabilities were published between June 10 and July 2, 2026, with fixes backported on July 10, 2026. Users are advised to update their systems using the provided commands to mitigate these risks. The affected systems include Fedora 43 and 44, impacting a wide range of users reliant on Erlang for applications.

Key Points: • Multiple critical vulnerabilities in Fedora Erlang require immediate attention. • CVE-2026-48860 allows for authentication bypass, posing a significant risk. • Users should apply the latest updates to mitigate potential exploitation.