UpHeron
All vulnerabilities

Servers and applications

CVE-2026-48858

Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. The ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_extension=false) extracts the IP address from the server's 227 response and passes it directly to gen_tcp:connect/4 without validating it…

Severity
Medium 6.3
Published
10 Jun 2026
Last changed
24 Jul 2026
Added to UpHeron
16 Oct 2026
Fixed in
27.3.4.13, 28.5.0.2, 29.0.2
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 17.4 before 27.3.4.13
  • From 28.0 before 28.5.0.2
  • From 29.0 before 29.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-48858
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-48858