#otp

Analysis · Jun 19, 2026 · Colten Anderson

Your vuln scanner is looking for OpenSSH. The exploited bug is in Erlang.

CVE-2025-32433 is a CVSS 10.0 pre-auth RCE in Erlang/OTP's SSH server, and it's exploited in the wild against OT firewalls. The reason it slips past your scans is the whole point.