Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-j7t3-nrjj-pfgp
Vulnerability ID VCID-j7t3-nrjj-pfgp
Aliases CVE-2026-28810
Summary
Status Published
Exploitability 0.5
Weighted Severity 5.7
Risk 2.9
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-340 Generation of Predictable Numbers or Identifiers
CWE-331 Insufficient Entropy
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28810.json
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.0005 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2026-28810
cvssv4 6.3 https://cna.erlef.org/cves/CVE-2026-28810.html
ssvc Track https://cna.erlef.org/cves/CVE-2026-28810.html
cvssv3.1 5.9 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv4 6.3 https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5
ssvc Track https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5
cvssv4 6.3 https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8
ssvc Track https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8
cvssv4 6.3 https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd
ssvc Track https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd
cvssv4 6.3 https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8
ssvc Track https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8
cvssv4 6.3 https://osv.dev/vulnerability/EEF-CVE-2026-28810
ssvc Track https://osv.dev/vulnerability/EEF-CVE-2026-28810
cvssv4 6.3 https://www.erlang.org/doc/system/versions.html#order-of-versions
ssvc Track https://www.erlang.org/doc/system/versions.html#order-of-versions
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28810.json
https://api.first.org/data/v1/epss?cve=CVE-2026-28810
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28810
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2455868 https://bugzilla.redhat.com/show_bug.cgi?id=2455868
36f23c9d2cc54afe83671dd7343596d7972839a5 https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5
b057a9d995017b1be50d6dc02edd52382f3231b8 https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
CVE-2026-28810.html https://cna.erlef.org/cves/CVE-2026-28810.html
dd15e8eb03548c5e55e9915f0e91389ec6bad9fd https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd
EEF-CVE-2026-28810 https://osv.dev/vulnerability/EEF-CVE-2026-28810
GHSA-v884-5jg5-whj8 https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8
versions.html#order-of-versions https://www.erlang.org/doc/system/versions.html#order-of-versions
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28810.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://cna.erlef.org/cves/CVE-2026-28810.html
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://cna.erlef.org/cves/CVE-2026-28810.html
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://github.com/erlang/otp/commit/36f23c9d2cc54afe83671dd7343596d7972839a5
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://github.com/erlang/otp/commit/b057a9d995017b1be50d6dc02edd52382f3231b8
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://github.com/erlang/otp/commit/dd15e8eb03548c5e55e9915f0e91389ec6bad9fd
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://github.com/erlang/otp/security/advisories/GHSA-v884-5jg5-whj8
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://osv.dev/vulnerability/EEF-CVE-2026-28810
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://osv.dev/vulnerability/EEF-CVE-2026-28810
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://www.erlang.org/doc/system/versions.html#order-of-versions
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-07T16:27:52Z/ Found at https://www.erlang.org/doc/system/versions.html#order-of-versions
Exploit Prediction Scoring System (EPSS)
Percentile 0.13069
EPSS Score 0.00043
Published At April 24, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-08T01:54:04.322057+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.1.0