Authentication Bypass in OpenBSD Product by OpenBSD Vendor

CVE-2026-55706

What is CVE-2026-55706?

The sppp_pap_input function in the OpenBSD network subsystem prior to the 076e2b1 commit is susceptible to an authentication bypass. The flaw arises when specific zero values for lengths are processed, potentially allowing unauthorized access without proper authentication. This vulnerability can compromise the integrity of network communications and user authentication, highlighting the importance of system updates to mitigate such risks.

References