Erlang/OTP 27.x < 27.3.4.10 / 28.x < 28.4.2 OCSP Certificate Validation Bypass (CVE-2026-32144)

Language:

Version 1.4 Apr 28, 2026, 2:30 AM CVSS metrics ("CVSSv2 score" set to 7.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:N") CVSSv2 severity (based on CVE-2026-32144, severity increased from "Medium" to "High") Plugin Feed: 202604280230
Version 1.3 Apr 13, 2026, 9:49 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 threat score" set to 7.6) Exploit attributes ("Exploitability ease" set to "No known exploits are available") Exploit attributes ("Exploit available" set to "False") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Plugin Feed: 202604130949
Version 1.2 Apr 10, 2026, 7:42 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202604101942
Version 1.1 Apr 9, 2026, 3:08 PM New Plugin Feed: 202604091508

* Changelogs are generally available for changes made after Nov 1, 2022