Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for     OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce     strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-     in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been     patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7656-1 advisory.

    It was discovered that Erlang OTPs SSH module incorrectly enforced strict KEX handshake hardening     measures. A remote attacker able to intercept communications could possibly use this issue to insert     optional messages into connections during the handshake. (CVE-2025-46712)

    It was discovered that Erlang OTP incorrectly handled ZIP archives. If a user or automated system were     tricked into opening a specially crafted ZIP archive, a remote attacker could possibly use this issue to     overwrite arbitrary files outside of the intended directory. (CVE-2025-4748)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory.

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for     OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce     strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-     in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been     patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of erlang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46712 advisory.

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for     OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce     strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-     in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been     patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for
    OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce
    strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-
    in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been
    patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).
    (CVE-2025-46712)

ID	Name	Product	Family	Type	Severity
248920	Linux Distros Unpatched Vulnerability : CVE-2025-46712	Nessus	Misc.	Local	low
242577	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Erlang vulnerabilities (USN-7656-1)	Nessus	Ubuntu Local Security Checks	Local	medium
241931	CBL Mariner 2.0 Security Update: erlang (CVE-2025-46712)	Nessus	MarinerOS Local Security Checks	Local	low
241855	Azure Linux 3.0 Security Update: erlang (CVE-2025-46712)	Nessus	Azure Linux Local Security Checks	Local	low
427282	Alpine: erlang: security update to 26.2.5.12-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	low
427282	Alpine: erlang: security update to 26.2.5.12-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	low

Detections

Analytics

CVE-2025-46712

low

Tenable Plugins

low

medium

low

low

low

low