CVE-2026-21620 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-21620 Interim 1 1 2026-03-05T00:18:40Z current 2026-03-05T00:18:40Z 2026-03-05T00:18:40Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-21620 Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl. This issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 erlang erlang-debugger erlang-debugger-src erlang-dialyzer erlang-dialyzer-src erlang-diameter erlang-diameter-src erlang-doc erlang-epmd erlang-et erlang-et-src erlang-jinterface erlang-jinterface-src erlang-observer erlang-observer-src erlang-reltool erlang-reltool-src erlang-src erlang-wx erlang-wx-src erlang26 erlang26-debugger erlang26-debugger-src erlang26-dialyzer erlang26-dialyzer-src erlang26-diameter erlang26-diameter-src erlang26-doc erlang26-epmd erlang26-et erlang26-et-src erlang26-jinterface erlang26-jinterface-src erlang26-observer erlang26-observer-src erlang26-reltool erlang26-reltool-src erlang26-src erlang26-wx erlang26-wx-src erlang as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS erlang-epmd as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS erlang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS erlang-epmd as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS erlang as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang-epmd as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang26-epmd as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang as a component of SUSE Linux Enterprise Server 15 SP2-LTSS erlang-epmd as a component of SUSE Linux Enterprise Server 15 SP2-LTSS erlang as a component of SUSE Linux Enterprise Server 15 SP3-LTSS erlang-epmd as a component of SUSE Linux Enterprise Server 15 SP3-LTSS erlang as a component of SUSE Linux Enterprise Server 15 SP4-LTSS erlang-epmd as a component of SUSE Linux Enterprise Server 15 SP4-LTSS erlang as a component of SUSE Linux Enterprise Server 15 SP5-LTSS erlang-epmd as a component of SUSE Linux Enterprise Server 15 SP5-LTSS erlang as a component of SUSE Linux Enterprise Server 15 SP6-LTSS erlang-epmd as a component of SUSE Linux Enterprise Server 15 SP6-LTSS erlang26 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS erlang26-epmd as a component of SUSE Linux Enterprise Server 15 SP6-LTSS erlang as a component of SUSE Linux Enterprise Server 16.0 erlang-epmd as a component of SUSE Linux Enterprise Server 16.0 erlang as a component of SUSE Linux Enterprise Server Teradata 15 SP4 erlang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 erlang-epmd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 erlang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 erlang-epmd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 erlang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 erlang-epmd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 erlang26 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 erlang26-epmd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 erlang as a component of SUSE Linux Enterprise Server for SAP applications 16.0 erlang-epmd as a component of SUSE Linux Enterprise Server for SAP applications 16.0 erlang as a component of openSUSE Leap 15.6 erlang-debugger as a component of openSUSE Leap 15.6 erlang-debugger-src as a component of openSUSE Leap 15.6 erlang-dialyzer as a component of openSUSE Leap 15.6 erlang-dialyzer-src as a component of openSUSE Leap 15.6 erlang-diameter as a component of openSUSE Leap 15.6 erlang-diameter-src as a component of openSUSE Leap 15.6 erlang-doc as a component of openSUSE Leap 15.6 erlang-epmd as a component of openSUSE Leap 15.6 erlang-et as a component of openSUSE Leap 15.6 erlang-et-src as a component of openSUSE Leap 15.6 erlang-jinterface as a component of openSUSE Leap 15.6 erlang-jinterface-src as a component of openSUSE Leap 15.6 erlang-observer as a component of openSUSE Leap 15.6 erlang-observer-src as a component of openSUSE Leap 15.6 erlang-reltool as a component of openSUSE Leap 15.6 erlang-reltool-src as a component of openSUSE Leap 15.6 erlang-src as a component of openSUSE Leap 15.6 erlang-wx as a component of openSUSE Leap 15.6 erlang-wx-src as a component of openSUSE Leap 15.6 erlang26 as a component of openSUSE Leap 15.6 erlang26-debugger as a component of openSUSE Leap 15.6 erlang26-debugger-src as a component of openSUSE Leap 15.6 erlang26-dialyzer as a component of openSUSE Leap 15.6 erlang26-dialyzer-src as a component of openSUSE Leap 15.6 erlang26-diameter as a component of openSUSE Leap 15.6 erlang26-diameter-src as a component of openSUSE Leap 15.6 erlang26-doc as a component of openSUSE Leap 15.6 erlang26-epmd as a component of openSUSE Leap 15.6 erlang26-et as a component of openSUSE Leap 15.6 erlang26-et-src as a component of openSUSE Leap 15.6 erlang26-jinterface as a component of openSUSE Leap 15.6 erlang26-jinterface-src as a component of openSUSE Leap 15.6 erlang26-observer as a component of openSUSE Leap 15.6 erlang26-observer-src as a component of openSUSE Leap 15.6 erlang26-reltool as a component of openSUSE Leap 15.6 erlang26-reltool-src as a component of openSUSE Leap 15.6 erlang26-src as a component of openSUSE Leap 15.6 erlang26-wx as a component of openSUSE Leap 15.6 erlang26-wx-src as a component of openSUSE Leap 15.6 Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl. This issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0. CVE-2026-21620 important 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N