https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:03:34.802439+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-53846 CVE-2024-53846 — ssl fails to validate incorrect extened key usage 2026-10-10T22:03:34.803533+00:00

Affected: erlang otp

OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and OTP-27.0, resulting in a server or client verifying the peer when incorrect extended key usage is presented (i.e., a server will verify a client if they have server auth ext key usage and vice versa).