CVE-2026-55706

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

• CWE-1284

• https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.htmlThird Party Advisory, Exploit
• https://github.com/openbsd/src/commit/076e2b1c1fc4ac0883a72d3544131ad5cee7adf8Patch
• https://www.openwall.com/lists/oss-security/2026/06/16/9Exploit, Mailing List, Patch, Third Party Advisory
• https://blog.argus-systems.ai/blog/poc-001-pap-bypass.pyExploit

Published

Jun 17, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55693Vim is an open source, command line text editor. Prior to 9.…7.8
• CVE-2026-55697pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm…8.8
• CVE-2026-55698pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm…8.8
• CVE-2026-55699pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Mani…6.5
• CVE-2026-5570A vulnerability was determined in Technostrobe HI-LED-WR120-…9.8
• CVE-2026-55700pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm s…7.1
• CVE-2026-55707In OpenStack Neutron before 28.0.2, the subnetpool onboardin…7.1
• CVE-2026-55708In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the …3.1
• CVE-2026-5571A vulnerability was identified in Technostrobe HI-LED-WR120-…7.5
• CVE-2026-55717In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, whe…5.9
• CVE-2026-5572A security flaw has been discovered in Technostrobe HI-LED-W…4.3
• CVE-2026-55721Storage Concentrator (SC & SCVM) is vulnerable to SQL inject…9.3