← All advisories

Medium severity5.8NVD Advisory· Published Jun 17, 2026· Updated Jul 13, 2026

CVE-2026-55706

CVE-2026-55706

Description

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

OpenBSD/Srcinferred2 versions
< 076e2b1+ 1 more
- (no CPE)range: < 076e2b1
- (no CPE)range: <076e2b1
OpenBSD/OpenBSD2 versions
cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*range: <=7.6
- (no CPE)range: <076e2b1

Patches

Vulnerability mechanics

References

4

github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8nvdPatch
blog.argus-systems.ai/blog/poc-001-pap-bypass.pynvdExploit
www.openwall.com/lists/oss-security/2026/06/16/9nvdExploitMailing ListPatchThird Party Advisory
blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.htmlnvdThird Party AdvisoryExploit

News mentions

0

No linked articles in our index yet.