CVE-2026-55706

No fix known EPSS <1%CVSS 5.8

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

Published 2026-06-17 · CVE record · OSV

Products: openbsd