PT-2026-21008
CVE-2026-21620
·
Published
2026-02-20
·
Updated
2026-10-08
Description by
CVSS 3.1
9.4
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions
erlang otp versions 1.0 through 6.9
erlang otp version 17.0
erlang otp versions prior to 7.0
Description
The software contains a Relative Path Traversal and Improper Isolation or Compartmentalization issue. The issue is associated with program files
lib/tftp/src/tftp file.erl and src/tftp file.erl. The vulnerability affects the tftp file modules within erlang/otp, inets, and tftp.Recommendations
erlang otp versions 1.0 through 6.9: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
erlang otp version 17.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
erlang otp versions prior to 7.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾