UpHeron
All vulnerabilities

Servers and applications

CVE-2026-94200

TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

Severity
High 8.2
Published
14 Oct 2026
Last changed
16 Oct 2026
Added to UpHeron
14 Oct 2026
Fixed in
27.3.4.19, 28.5.0.8, 29.1.2
Sources
CVE Program

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cna:erlang|otp
  • From 23.3 before 27.3.4.19
  • From 28 before 28.5.0.8
  • From 29 before 29.1.2
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 23.3 before 27.3.4.19
  • From 28 before 28.5.0.8
  • From 29 before 29.1.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-94200