Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Apr 18, 2025

0 new incidents, 1 with updates.

Updated

  • ClosedPatched

    Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)

    The Erlang/OTP SSH server processed connection-protocol messages before authentication, so anyone who could reach the port could run commands. It affects any product embedding the OTP SSH daemon. Fixed in OTP-27.3.3, 26.2.5.11 and 25.3.2.20; CISA confirmed exploitation in June.

    Erlang/OTP SSHClosed Jun 9, 2025