CVE-2026-58096: Freebsd

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp(8) or potentially execute arbitrary code as root.

Affected products

• Freebsd Freebsd: version 14.4 only; version 15.0 only; version 15.1 only

Published 2026-08-26. Last modified 2026-09-10.