PT-2026-21008

CVE-2026-21620

·

Published

2026-02-20

·

Updated

2026-10-08

Description by

CVSS 3.1
9.4
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions erlang otp versions 1.0 through 6.9 erlang otp version 17.0 erlang otp versions prior to 7.0
Description The software contains a Relative Path Traversal and Improper Isolation or Compartmentalization issue. The issue is associated with program files lib/tftp/src/tftp file.erl and src/tftp file.erl. The vulnerability affects the tftp file modules within erlang/otp, inets, and tftp.
Recommendations erlang otp versions 1.0 through 6.9: At the moment, there is no information about a newer version that contains a fix for this vulnerability. erlang otp version 17.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. erlang otp versions prior to 7.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-HMRC-PRH3-RPVP
AZL-78278
AZL-78285
OESA-2026-2703
OESA-2026-2704
OESA-2026-2705
OPENSUSE-SU-2026:10947-1
OPENSUSE-SU-2026:20607-1
SUSE-SU-2026:1714-1
SUSE-SU-2026:2010-1
SUSE-SU-2026:21374-1
USN-8901-1
Found an issue in the description? Have something to add? Feel free to write us 👾