{"id":"CVE-2026-55706","details":"sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.","modified":"2026-07-15T10:20:24.734187Z","published":"2026-06-17T00:53:23.246Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55706.json","unresolved_ranges":[{"source":"AFFECTED_FIELD","extracted_events":[{"fixed":"076e2b1c1fc4ac0883a72d3544131ad5cee7adf8"}]},{"extracted_events":[{"fixed":"076e2b1c1fc4ac0883a72d3544131ad5cee7adf8"}],"source":"CPE_FIELD"},{"extracted_events":[{"fixed":"076e2b1"}],"source":"DESCRIPTION"}],"cna_assigner":"mitre","cwe_ids":["CWE-1284"]},"references":[{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/06/16/9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55706.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55706"},{"type":"FIX","url":"https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8"},{"type":"ARTICLE","url":"https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.html"},{"type":"EVIDENCE","url":"https://blog.argus-systems.ai/blog/poc-001-pap-bypass.py"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openbsd/src","events":[{"introduced":"0"},{"fixed":"076e2b1c1fc4ac0883a72d3544131ad5cee7adf8"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55706.json","vanir_signatures_modified":"2026-07-15T10:20:24Z","vanir_signatures":[{"id":"CVE-2026-55706-515dbc37","signature_type":"Function","signature_version":"v1","source":"https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8","target":{"file":"sys/net/if_spppsubr.c","function":"sppp_pap_input"},"deprecated":false,"digest":{"function_hash":"2097965285115964309935640491646252391","length":3307}},{"digest":{"threshold":0.9,"line_hashes":["277351180250394368111172148424804271165","229383859553827109657299294920337622885","500910960700251678480365928367335945","122536534252742298291354128123013308442","116718580092651454081831116354654006205","323939868596135558205401807657602422870"]},"id":"CVE-2026-55706-fc18a18b","signature_type":"Line","signature_version":"v1","source":"https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8","target":{"file":"sys/net/if_spppsubr.c"},"deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"}]}