VulnRadar

Data against noise.

Built with NaN
Page generated: 08 Nov 2026, 07:52 UTC
← Dashboard

CVE-2025-32433

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, …

Read full description
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
CVSS 10.0 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
9.0/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 10: +1.50
  • Fresh EPSS: 98.92%: +0.49

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Rescana
Press · 28 May 2026, 07:00 · Active Exploitation Alert: AI-Assisted Zero-Day Targeting Erlang SSH Library (CVE-2025-32433) Outpaces Vulnerability Scanners - Rescana
Rapid7
Press · 05 Jan 2026, 08:00 · Metasploit 2025 Annual Wrap-Up - Rapid7
CSO Online
Press · 13 Aug 2025, 07:00 · Hackers exploit unpatched Erlang/OTP to crack OT firewalls - CSO Online
CyberSecurityNews
Press · 12 Aug 2025, 07:00 · Erlang/OTP SSH RCE Vulnerability Exploited in the Wild to Attack Across OT Networks - CyberSecurityNews
Unit 42
Press · 11 Aug 2025, 07:00 · Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild - Unit 42
See all 11 source documents
SecurityWeek
Press · 24 Apr 2025, 07:00 · Cisco Confirms Some Products Impacted by Critical Erlang/OTP Flaw - SecurityWeek
Cybersecurity Dive
Press · 21 Apr 2025, 07:00 · Researchers warn of critical flaw found in Erlang OTP SSH - Cybersecurity Dive
Cyber Security Agency of Singapore
Press · 21 Apr 2025, 07:00 · Critical Vulnerability in Erlang/OTP SSH Servers - Cyber Security Agency of Singapore
The Register
Press · 21 Apr 2025, 07:00 · AI models can generate exploit code at lightning speed - The Register
Arctic Wolf
Press · 21 Apr 2025, 07:00 · CVE-2025-32433: Maximum Severity Unauthenticated RCE Vulnerability in Erlang/OTP SSH - Arctic Wolf
The Hacker News
Press · 17 Apr 2025, 07:00 · Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution - The Hacker News

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 9.0 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

11

Public exploit entries / repo candidates

See 11 repos with metrics
RepositoryStarsForksLanguageUpdated
omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC162Python04 Aug 2025, 17:34
NiteeshPujari/CVE-2025-32433-PoC71Python14 Aug 2025, 07:43
ekomsSavior/POC_CVE-2025-3243342Python19 Apr 2025, 02:48
joshuavanderpoll/cve-2025-3243330Go07 Mar 2026, 15:33
yonathanpy/CVE-2025-32433.py31Python26 Feb 2026, 14:38
AntonieSoga/Erlang-OTP-PoC_CVE-2025-3243321Dockerfile17 Jan 2026, 00:57
dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE20Python07 Sep 2025, 16:25
abrewer251/CVE-2025-32433_Erlang-OTP_PoC12Python13 May 2025, 19:43
Batman529/PoC-CVE-2025-3243300Python19 Oct 2025, 11:07
Liam-Worsley/CVE-2025-32433-PoC-Analysis00Python14 Aug 2026, 20:18
ODST-Forge/CVE-2025-32433_PoC00Python13 May 2025, 14:32
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 10; EPSS 98.9%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:34.986036+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
16 Apr 2025, 21:34
First press mention
17 Apr 2025, 07:00
Added to the CISA KEV catalog
09 Jun 2025, 00:00
Latest press mention
28 May 2026, 07:00
Score calculated
05 Nov 2026, 13:59
PoCs on GitHub
11 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar