UpHeron
All vulnerabilities

Servers and applications

CVE-2026-105236

TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries

Severity
Medium 6.3
Published
14 Oct 2026
Last changed
16 Oct 2026
Added to UpHeron
14 Oct 2026
Fixed in
27.3.4.19, 28.5.0.8, 29.1.2
Sources
CVE Program

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cna:erlang|otp
  • From 18.0 before 27.3.4.19
  • From 28 before 28.5.0.8
  • From 29 before 29.1.2
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 18.0 before 27.3.4.19
  • From 28 before 28.5.0.8
  • From 29 before 29.1.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-105236