About Remote Code Execution – Erlang/OTP (CVE-2025-32433) vulnerability. Erlang is a programming language used to build massively scalable soft real-time systems with requirements for high availability. Used in telecom, banking, e-commerce, telephony, and messaging. OTP is a set of Erlang libraries and design principles providing middle-ware to develop these systems.
A message handling vulnerability in the Erlang/OTP SSH server allows an unauthenticated attacker to execute arbitrary code. The code runs in the context of the SSH daemon. If the daemon is running as root, this grants full control over the device.
The vendor bulletin was released on April 16. Updated versions: OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20.
On April 17, a write-up and a PoC exploit (developed using AI) appeared on the Platform Security blog.
Cisco devices are affected – and likely not the only ones. 
No signs of exploitation in the wild so far.
No mentions yet in exploit packs or on GitHub.
Wait a minute — there was a trending 
Turns out, it’s THE SAME vulnerability. 
Check Point reports: “Microsoft had initially assigned the vulnerability the CVE identifier 
164 in the Linux Kernel. No vulnerabilities show signs of being exploited in the wild. There are 7 vulnerabilities that appear to have publicly available exploits.
SQL injection – Exim (CVE-2025-26794)
