CVE-2026-557065.8MediumCWE-1284
OpenBSD vulnerability
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
29th percentile
050100
Higher than 29% of scored CVEs
5.8MediumCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 19 Jun.
- OpenBSD vulnerability allows auth bypass using empty credentialsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.