Medium severity5.3NVD Advisory· Published May 11, 2021· Updated Jun 17, 2026

CVE-2020-26142

Description

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenBSD/OpenBSDdescription
OpenBSD/OpenBSDllm-fuzzy2 versions
6.6+ 1 more
- (no CPE)range: 6.6
- cpe:2.3:o:openbsd:openbsd:6.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2021/05/11/12nvdMailing ListThird Party Advisory
github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdnvdThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWunvdThird Party Advisory
www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63nvdThird Party Advisory
www.fragattacks.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000