PT-2026-50221 · Openbsd · Openbsd

Published 2026-06-17 · Updated 2026-06-17 · CVE-2026-55706

Mitre

CVSS v3.1

5.8

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

sppp pap input in sys/net/if spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-55706

Affected Products

Openbsd

References · 3

• https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8 · Note
• https://openwall.com/lists/oss-security/2026/06/16/9 · Note
• https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.html · Note