Skip to content
Critical openSUSE Erlang 26 Patch Addresses 22 Vulnerabilities

Critical openSUSE Erlang 26 Patch Addresses 22 Vulnerabilities

First seen 12 Aug 2026, 04:25 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 13, 2026 at 03:34 UTC
  • •The patch addresses 22 vulnerabilities in the openSUSE Erlang 26 system.
  • •Critical CVEs include CVE-2026-28810 (DNS cache poisoning) and CVE-2026-42789 (certificate forgery).
  • •Users are advised to apply the patch immediately to prevent potential exploitation.

On August 12, 2026, an important patch was released for the openSUSE Erlang 26 system, addressing 22 vulnerabilities. Key issues include CVE-2026-28810, which allows DNS cache poisoning, and CVE-2026-42789, enabling certificate chain forgery. Other vulnerabilities include a permanent denial of service (CVE-2026-42792) and a relative path traversal flaw (CVE-2026-47078). The vulnerabilities affect various components of the Erlang system, including the `public_key` application and SFTP functionalities. Users are urged to apply the patch immediately to mitigate potential exploitation. The vulnerabilities were published between April and July 2026, with the patch released on the same day as the advisory. The update is critical for maintaining system integrity and security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 47d ago How this analysis works

Timeline

2026-04-07
CVE-2026-28810 published
Predictable DNS transaction IDs can lead to DNS cache poisoning, affecting system integrity.
Linuxsecurity
2026-05-27
CVE-2026-42789 published
The `public_key` application allows non-CA certificates as intermediate issuers, enabling chain forgery.
Linuxsecurity
2026-05-27
CVE-2026-42790 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-10
CVE-2026-48855 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-10
CVE-2026-48856 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-27
CVE-2026-42792 published
Improper handling of exceptional conditions leads to a permanent denial of service via `epmd` connection slot exhaustion.
Linuxsecurity
2026-07-27
CVE-2026-47078 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-12
Patch released for Erlang 26 vulnerabilities
An important patch was released addressing 22 vulnerabilities in the openSUSE Erlang 26 system, with immediate application recommended.
Linuxsecurity

More articles in this cluster (5)

Following this threat?

Track CVE-2026-28810 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3