cve-2026-28808
HIGH CVSS 7.4 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-04-07 12:28 UTC
- Last Modified
- 2026-06-30
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28808.json"
}
],
"title": "erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization",
"tracking": {
"current_release_date": "2026-06-30T04:03:59+00:00",
"generator": {
"date": "2026-06-30T04:03:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "CVE-2026-28808",
"initial_release_date": "2026-04-07T12:28:16.056000+00:00",
"revision_history": [
{
"date": "2026-04-07T12:28:16.056000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-30T03:20:44+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-06-30T04:03:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 16.2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 17.1",
"product": {
"name": "Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:17.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 17.1"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 18.0",
"product": {
"name": "Red Hat OpenStack Platform 18.0",
"product_id": "red_hat_openstack_platform_18.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 18.0"
},
{
"category": "product_version",
"name": "erlang-crypto",
"product": {
"name": "erlang-crypto",
"product_id": "erlang-crypto",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl",
"product": {
"name": "erlang-sasl",
"product_id": "erlang-sasl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib",
"product": {
"name": "erlang-stdlib",
"product_id": "erlang-stdlib",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools",
"product": {
"name": "erlang-runtime_tools",
"product_id": "erlang-runtime_tools",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools"
}
}
},
{
"category": "product_version",
"name": "erlang.src",
"product": {
"name": "erlang.src",
"product_id": "erlang.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang?arch=src"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon",
"product": {
"name": "erlang-os_mon",
"product_id": "erlang-os_mon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl",
"product": {
"name": "erlang-ssl",
"product_id": "erlang-ssl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe",
"product": {
"name": "erlang-hipe",
"product_id": "erlang-hipe",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools",
"product": {
"name": "erlang-syntax_tools",
"product_id": "erlang-syntax_tools",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools"
}
}
},
{
"category": "product_version",
"name": "erlang-tools",
"product": {
"name": "erlang-tools",
"product_id": "erlang-tools",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap",
"product": {
"name": "erlang-eldap",
"product_id": "erlang-eldap",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl",
"product": {
"name": "erlang-xmerl",
"product_id": "erlang-xmerl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel",
"product": {
"name": "erlang-kernel",
"product_id": "erlang-kernel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler",
"product": {
"name": "erlang-compiler",
"product_id": "erlang-compiler",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key",
"product": {
"name": "erlang-public_key",
"product_id": "erlang-public_key",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key"
}
}
},
{
"category": "product_version",
"name": "erlang-erts",
"product": {
"name": "erlang-erts",
"product_id": "erlang-erts",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1",
"product": {
"name": "erlang-asn1",
"product_id": "erlang-asn1",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia",
"product": {
"name": "erlang-mnesia",
"product_id": "erlang-mnesia",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools",
"product": {
"name": "erlang-parsetools",
"product_id": "erlang-parsetools",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools"
}
}
},
{
"category": "product_version",
"name": "erlang-inets",
"product": {
"name": "erlang-inets",
"product_id": "erlang-inets",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp",
"product": {
"name": "erlang-snmp",
"product_id": "erlang-snmp",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-asn1"
},
"product_reference": "erlang-asn1",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-compiler"
},
"product_reference": "erlang-compiler",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-crypto"
},
"product_reference": "erlang-crypto",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-eldap"
},
"product_reference": "erlang-eldap",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-erts"
},
"product_reference": "erlang-erts",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-hipe"
},
"product_reference": "erlang-hipe",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-inets"
},
"product_reference": "erlang-inets",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-kernel"
},
"product_reference": "erlang-kernel",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-mnesia"
},
"product_reference": "erlang-mnesia",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-os_mon"
},
"product_reference": "erlang-os_mon",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-parsetools"
},
"product_reference": "erlang-parsetools",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-public_key"
},
"product_reference": "erlang-public_key",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-runtime_tools"
},
"product_reference": "erlang-runtime_tools",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-sasl"
},
"product_reference": "erlang-sasl",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-snmp"
},
"product_reference": "erlang-snmp",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-ssl"
},
"product_reference": "erlang-ssl",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-stdlib"
},
"product_reference": "erlang-stdlib",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-syntax_tools"
},
"product_reference": "erlang-syntax_tools",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-tools"
},
"product_reference": "erlang-tools",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang-xmerl"
},
"product_reference": "erlang-xmerl",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:erlang.src"
},
"product_reference": "erlang.src",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1 as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-asn1"
},
"product_reference": "erlang-asn1",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-compiler"
},
"product_reference": "erlang-compiler",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-crypto"
},
"product_reference": "erlang-crypto",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-eldap"
},
"product_reference": "erlang-eldap",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-erts"
},
"product_reference": "erlang-erts",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-inets"
},
"product_reference": "erlang-inets",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-kernel"
},
"product_reference": "erlang-kernel",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-mnesia"
},
"product_reference": "erlang-mnesia",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-os_mon"
},
"product_reference": "erlang-os_mon",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-parsetools"
},
"product_reference": "erlang-parsetools",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-public_key"
},
"product_reference": "erlang-public_key",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-runtime_tools"
},
"product_reference": "erlang-runtime_tools",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-sasl"
},
"product_reference": "erlang-sasl",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-snmp"
},
"product_reference": "erlang-snmp",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-ssl"
},
"product_reference": "erlang-ssl",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-stdlib"
},
"product_reference": "erlang-stdlib",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-syntax_tools"
},
"product_reference": "erlang-syntax_tools",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-tools"
},
"product_reference": "erlang-tools",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl as a component of Red Hat OpenStack Platform 17.1",
"product_id": "red_hat_openstack_platform_17.1:erlang-xmerl"
},
"product_reference": "erlang-xmerl",
"relates_to_product_reference": "red_hat_openstack_platform_17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang.src as a component of Red Hat OpenStack Platform 18.0",
"product_id": "red_hat_openstack_platform_18.0:erlang.src"
},
"product_reference": "erlang.src",
"relates_to_product_reference": "red_hat_openstack_platform_18.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28808",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-04-07T13:01:42.326732+00:00",
"flags": [
{
"label": "vulnerable_code_not_in_execute_path",
"product_ids": [
"red_hat_openstack_platform_18.0:erlang.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455909"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP (inets modules). A remote unauthenticated attacker could exploit an incorrect authorization vulnerability when CGI (Common Gateway Interface) scripts are served via script_alias. This vulnerability arises from a path mismatch where access controls are evaluated against a different path than the script's execution path. This allows unauthorized access to CGI scripts intended to be protected by directory rules, potentially leading to information disclosure or the execution of unauthorized scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"known_affected": [
"red_hat_openstack_platform_16.2:erlang-asn1",
"red_hat_openstack_platform_16.2:erlang-compiler",
"red_hat_openstack_platform_16.2:erlang-crypto",
"red_hat_openstack_platform_16.2:erlang-eldap",
"red_hat_openstack_platform_16.2:erlang-erts",
"red_hat_openstack_platform_16.2:erlang-hipe",
"red_hat_openstack_platform_16.2:erlang-inets",
"red_hat_openstack_platform_16.2:erlang-kernel",
"red_hat_openstack_platform_16.2:erlang-mnesia",
"red_hat_openstack_platform_16.2:erlang-os_mon",
"red_hat_openstack_platform_16.2:erlang-parsetools",
"red_hat_openstack_platform_16.2:erlang-public_key",
"red_hat_openstack_platform_16.2:erlang-runtime_tools",
"red_hat_openstack_platform_16.2:erlang-sasl",
"red_hat_openstack_platform_16.2:erlang-snmp",
"red_hat_openstack_platform_16.2:erlang-ssl",
"red_hat_openstack_platform_16.2:erlang-stdlib",
"red_hat_openstack_platform_16.2:erlang-syntax_tools",
"red_hat_openstack_platform_16.2:erlang-tools",
"red_hat_openstack_platform_16.2:erlang-xmerl",
"red_hat_openstack_platform_16.2:erlang.src",
"red_hat_openstack_platform_17.1:erlang-asn1",
"red_hat_openstack_platform_17.1:erlang-compiler",
"red_hat_openstack_platform_17.1:erlang-crypto",
"red_hat_openstack_platform_17.1:erlang-eldap",
"red_hat_openstack_platform_17.1:erlang-erts",
"red_hat_openstack_platform_17.1:erlang-inets",
"red_hat_openstack_platform_17.1:erlang-kernel",
"red_hat_openstack_platform_17.1:erlang-mnesia",
"red_hat_openstack_platform_17.1:erlang-os_mon",
"red_hat_openstack_platform_17.1:erlang-parsetools",
"red_hat_openstack_platform_17.1:erlang-public_key",
"red_hat_openstack_platform_17.1:erlang-runtime_tools",
"red_hat_openstack_platform_17.1:erlang-sasl",
"red_hat_openstack_platform_17.1:erlang-snmp",
"red_hat_openstack_platform_17.1:erlang-ssl",
"red_hat_openstack_platform_17.1:erlang-stdlib",
"red_hat_openstack_platform_17.1:erlang-syntax_tools",
"red_hat_openstack_platform_17.1:erlang-tools",
"red_hat_openstack_platform_17.1:erlang-xmerl"
],
"known_not_affected": [
"red_hat_openstack_platform_18.0:erlang.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28808"
},
{
"category": "external",
"summary": "RHBZ#2455909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28808",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28808"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28808",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28808"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-28808.html",
"url": "https://cna.erlef.org/cves/CVE-2026-28808.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/8fc71ac6af4fbcc54103bec2983ef22e82942688",
"url": "https://github.com/erlang/otp/commit/8fc71ac6af4fbcc54103bec2983ef22e82942688"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/9dfa0c51eac97866078e808dec2183cb7871ff7c",
"url": "https://github.com/erlang/otp/commit/9dfa0c51eac97866078e808dec2183cb7871ff7c"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-3vhp-h532-mc3f",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-3vhp-h532-mc3f"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-28808",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-28808"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-04-07T12:28:16.056000+00:00",
"remediations": [
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"red_hat_openstack_platform_16.2:erlang-asn1",
"red_hat_openstack_platform_16.2:erlang-compiler",
"red_hat_openstack_platform_16.2:erlang-crypto",
"red_hat_openstack_platform_16.2:erlang-eldap",
"red_hat_openstack_platform_16.2:erlang-erts",
"red_hat_openstack_platform_16.2:erlang-hipe",
"red_hat_openstack_platform_16.2:erlang-inets",
"red_hat_openstack_platform_16.2:erlang-kernel",
"red_hat_openstack_platform_16.2:erlang-mnesia",
"red_hat_openstack_platform_16.2:erlang-os_mon",
"red_hat_openstack_platform_16.2:erlang-parsetools",
"red_hat_openstack_platform_16.2:erlang-public_key",
"red_hat_openstack_platform_16.2:erlang-runtime_tools",
"red_hat_openstack_platform_16.2:erlang-sasl",
"red_hat_openstack_platform_16.2:erlang-snmp",
"red_hat_openstack_platform_16.2:erlang-ssl",
"red_hat_openstack_platform_16.2:erlang-stdlib",
"red_hat_openstack_platform_16.2:erlang-syntax_tools",
"red_hat_openstack_platform_16.2:erlang-tools",
"red_hat_openstack_platform_16.2:erlang-xmerl",
"red_hat_openstack_platform_16.2:erlang.src",
"red_hat_openstack_platform_17.1:erlang-asn1",
"red_hat_openstack_platform_17.1:erlang-compiler",
"red_hat_openstack_platform_17.1:erlang-crypto",
"red_hat_openstack_platform_17.1:erlang-eldap",
"red_hat_openstack_platform_17.1:erlang-erts",
"red_hat_openstack_platform_17.1:erlang-inets",
"red_hat_openstack_platform_17.1:erlang-kernel",
"red_hat_openstack_platform_17.1:erlang-mnesia",
"red_hat_openstack_platform_17.1:erlang-os_mon",
"red_hat_openstack_platform_17.1:erlang-parsetools",
"red_hat_openstack_platform_17.1:erlang-public_key",
"red_hat_openstack_platform_17.1:erlang-runtime_tools",
"red_hat_openstack_platform_17.1:erlang-sasl",
"red_hat_openstack_platform_17.1:erlang-snmp",
"red_hat_openstack_platform_17.1:erlang-ssl",
"red_hat_openstack_platform_17.1:erlang-stdlib",
"red_hat_openstack_platform_17.1:erlang-syntax_tools",
"red_hat_openstack_platform_17.1:erlang-tools",
"red_hat_openstack_platform_17.1:erlang-xmerl"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_openstack_platform_16.2:erlang-asn1",
"red_hat_openstack_platform_16.2:erlang-compiler",
"red_hat_openstack_platform_16.2:erlang-crypto",
"red_hat_openstack_platform_16.2:erlang-eldap",
"red_hat_openstack_platform_16.2:erlang-erts",
"red_hat_openstack_platform_16.2:erlang-hipe",
"red_hat_openstack_platform_16.2:erlang-inets",
"red_hat_openstack_platform_16.2:erlang-kernel",
"red_hat_openstack_platform_16.2:erlang-mnesia",
"red_hat_openstack_platform_16.2:erlang-os_mon",
"red_hat_openstack_platform_16.2:erlang-parsetools",
"red_hat_openstack_platform_16.2:erlang-public_key",
"red_hat_openstack_platform_16.2:erlang-runtime_tools",
"red_hat_openstack_platform_16.2:erlang-sasl",
"red_hat_openstack_platform_16.2:erlang-snmp",
"red_hat_openstack_platform_16.2:erlang-ssl",
"red_hat_openstack_platform_16.2:erlang-stdlib",
"red_hat_openstack_platform_16.2:erlang-syntax_tools",
"red_hat_openstack_platform_16.2:erlang-tools",
"red_hat_openstack_platform_16.2:erlang-xmerl",
"red_hat_openstack_platform_16.2:erlang.src",
"red_hat_openstack_platform_17.1:erlang-asn1",
"red_hat_openstack_platform_17.1:erlang-compiler",
"red_hat_openstack_platform_17.1:erlang-crypto",
"red_hat_openstack_platform_17.1:erlang-eldap",
"red_hat_openstack_platform_17.1:erlang-erts",
"red_hat_openstack_platform_17.1:erlang-inets",
"red_hat_openstack_platform_17.1:erlang-kernel",
"red_hat_openstack_platform_17.1:erlang-mnesia",
"red_hat_openstack_platform_17.1:erlang-os_mon",
"red_hat_openstack_platform_17.1:erlang-parsetools",
"red_hat_openstack_platform_17.1:erlang-public_key",
"red_hat_openstack_platform_17.1:erlang-runtime_tools",
"red_hat_openstack_platform_17.1:erlang-sasl",
"red_hat_openstack_platform_17.1:erlang-snmp",
"red_hat_openstack_platform_17.1:erlang-ssl",
"red_hat_openstack_platform_17.1:erlang-stdlib",
"red_hat_openstack_platform_17.1:erlang-syntax_tools",
"red_hat_openstack_platform_17.1:erlang-tools",
"red_hat_openstack_platform_17.1:erlang-xmerl"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"red_hat_openstack_platform_16.2:erlang-asn1",
"red_hat_openstack_platform_16.2:erlang-compiler",
"red_hat_openstack_platform_16.2:erlang-crypto",
"red_hat_openstack_platform_16.2:erlang-eldap",
"red_hat_openstack_platform_16.2:erlang-erts",
"red_hat_openstack_platform_16.2:erlang-hipe",
"red_hat_openstack_platform_16.2:erlang-inets",
"red_hat_openstack_platform_16.2:erlang-kernel",
"red_hat_openstack_platform_16.2:erlang-mnesia",
"red_hat_openstack_platform_16.2:erlang-os_mon",
"red_hat_openstack_platform_16.2:erlang-parsetools",
"red_hat_openstack_platform_16.2:erlang-public_key",
"red_hat_openstack_platform_16.2:erlang-runtime_tools",
"red_hat_openstack_platform_16.2:erlang-sasl",
"red_hat_openstack_platform_16.2:erlang-snmp",
"red_hat_openstack_platform_16.2:erlang-ssl",
"red_hat_openstack_platform_16.2:erlang-stdlib",
"red_hat_openstack_platform_16.2:erlang-syntax_tools",
"red_hat_openstack_platform_16.2:erlang-tools",
"red_hat_openstack_platform_16.2:erlang-xmerl",
"red_hat_openstack_platform_16.2:erlang.src",
"red_hat_openstack_platform_17.1:erlang-asn1",
"red_hat_openstack_platform_17.1:erlang-compiler",
"red_hat_openstack_platform_17.1:erlang-crypto",
"red_hat_openstack_platform_17.1:erlang-eldap",
"red_hat_openstack_platform_17.1:erlang-erts",
"red_hat_openstack_platform_17.1:erlang-inets",
"red_hat_openstack_platform_17.1:erlang-kernel",
"red_hat_openstack_platform_17.1:erlang-mnesia",
"red_hat_openstack_platform_17.1:erlang-os_mon",
"red_hat_openstack_platform_17.1:erlang-parsetools",
"red_hat_openstack_platform_17.1:erlang-public_key",
"red_hat_openstack_platform_17.1:erlang-runtime_tools",
"red_hat_openstack_platform_17.1:erlang-sasl",
"red_hat_openstack_platform_17.1:erlang-snmp",
"red_hat_openstack_platform_17.1:erlang-ssl",
"red_hat_openstack_platform_17.1:erlang-stdlib",
"red_hat_openstack_platform_17.1:erlang-syntax_tools",
"red_hat_openstack_platform_17.1:erlang-tools",
"red_hat_openstack_platform_17.1:erlang-xmerl",
"red_hat_openstack_platform_18.0:erlang.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important",
"product_ids": [
"red_hat_openstack_platform_16.2:erlang-asn1",
"red_hat_openstack_platform_16.2:erlang-compiler",
"red_hat_openstack_platform_16.2:erlang-crypto",
"red_hat_openstack_platform_16.2:erlang-eldap",
"red_hat_openstack_platform_16.2:erlang-erts",
"red_hat_openstack_platform_16.2:erlang-hipe",
"red_hat_openstack_platform_16.2:erlang-inets",
"red_hat_openstack_platform_16.2:erlang-kernel",
"red_hat_openstack_platform_16.2:erlang-mnesia",
"red_hat_openstack_platform_16.2:erlang-os_mon",
"red_hat_openstack_platform_16.2:erlang-parsetools",
"red_hat_openstack_platform_16.2:erlang-public_key",
"red_hat_openstack_platform_16.2:erlang-runtime_tools",
"red_hat_openstack_platform_16.2:erlang-sasl",
"red_hat_openstack_platform_16.2:erlang-snmp",
"red_hat_openstack_platform_16.2:erlang-ssl",
"red_hat_openstack_platform_16.2:erlang-stdlib",
"red_hat_openstack_platform_16.2:erlang-syntax_tools",
"red_hat_openstack_platform_16.2:erlang-tools",
"red_hat_openstack_platform_16.2:erlang-xmerl",
"red_hat_openstack_platform_16.2:erlang.src",
"red_hat_openstack_platform_17.1:erlang-asn1",
"red_hat_openstack_platform_17.1:erlang-compiler",
"red_hat_openstack_platform_17.1:erlang-crypto",
"red_hat_openstack_platform_17.1:erlang-eldap",
"red_hat_openstack_platform_17.1:erlang-erts",
"red_hat_openstack_platform_17.1:erlang-inets",
"red_hat_openstack_platform_17.1:erlang-kernel",
"red_hat_openstack_platform_17.1:erlang-mnesia",
"red_hat_openstack_platform_17.1:erlang-os_mon",
"red_hat_openstack_platform_17.1:erlang-parsetools",
"red_hat_openstack_platform_17.1:erlang-public_key",
"red_hat_openstack_platform_17.1:erlang-runtime_tools",
"red_hat_openstack_platform_17.1:erlang-sasl",
"red_hat_openstack_platform_17.1:erlang-snmp",
"red_hat_openstack_platform_17.1:erlang-ssl",
"red_hat_openstack_platform_17.1:erlang-stdlib",
"red_hat_openstack_platform_17.1:erlang-syntax_tools",
"red_hat_openstack_platform_17.1:erlang-tools",
"red_hat_openstack_platform_17.1:erlang-xmerl",
"red_hat_openstack_platform_18.0:erlang.src"
]
}
],
"title": "erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)