CVE detail
CVE-2026-55706
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- https://blog.argus-systems.ai/blog/poc-001-pap-bypass.pyblog.argus-systems.ai
No excerpt available.
Exploitblog.argus-systems.aiJun 17, 2026, 1:20 PM - https://www.openwall.com/lists/oss-security/2026/06/16/9www.openwall.com
No excerpt available.
Exploitwww.openwall.comJun 17, 2026, 1:20 PM No excerpt available.
Exploitgithub.comJun 17, 2026, 1:20 PM- https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.htmlblog.argus-systems.ai
No excerpt available.
Exploitblog.argus-systems.aiJun 17, 2026, 1:20 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-41285CVSS 4.3 · Medium
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero,…
- CVE-2026-54890CVSS 8.2 · High
Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation.…
- CVE-2026-59532CVSS 7.5 · High
Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.
- CVE-2026-59531CVSS 7.5 · High
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
- CVE-2026-58662CVSS 8.7 · High
Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are re…
- CVE-2026-66374CVSS 8.1 · High
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.