CRITICAL ERLANG/OTP SSH VULNERABILITY (CVSS 10.0) ALLOWS UNAUTHENTICATED CODE EXECUTION

Summary from the TLDR InfoSec newsletter

A critical vulnerability (CVE-2025-32433) in Erlang/OTP's SSH implementation allows attackers to execute arbitrary code without authentication. The flaw received a maximum CVSS score of 10.0. Affecting all SSH servers using the Erlang/OTP SSH library, it enables unauthenticated attackers to send protocol messages before authentication. Users are advised to update ASAP.