CVE-2026-55706

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55706
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55706.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55706
Published
2026-06-17T00:53:23Z
Modified
2026-10-08T07:13:48Z
Severity
  • 5.8 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

Database specific 
{
    "cna_assigner":  "mitre",
    "cwe_ids":  [
        "CWE-1284"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55706.json"
}
References

Affected packages

Git / github.com/openbsd/src

Affected ranges

Type
GIT
Repo
https://github.com/openbsd/src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
076e2b1c1fc4ac0883a72d3544131ad5cee7adf8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55706.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "2097965285115964309935640491646252391",
            "length":  3307
        },
        "id":  "CVE-2026-55706-515dbc37",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8",
        "target":  {
            "file":  "sys/net/if_spppsubr.c",
            "function":  "sppp_pap_input"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "277351180250394368111172148424804271165",
                "229383859553827109657299294920337622885",
                "500910960700251678480365928367335945",
                "122536534252742298291354128123013308442",
                "116718580092651454081831116354654006205",
                "323939868596135558205401807657602422870"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-55706-fc18a18b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8",
        "target":  {
            "file":  "sys/net/if_spppsubr.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-08T07:13:48Z"