Quick answers
- Is CVE-2026-58095 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-58095 being exploited in the wild.
- How severe is CVE-2026-58095?
- High severity, with a CVSS score of 8.8, published 26 August 2026.
- Which products and versions are affected?
- Freebsd All supported versions (14.4 before 2026-08-25, 15.0 before 2026-08-25, 15.1 before 2026-08-25).
- Is there a fix for CVE-2026-58095?
- A patch was published on 2026-08-25. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-58095 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-2026-58095?
- Check whether you run Freebsd at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The mp_Enddisc() function in ppp(8) uses incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. The vulnerability is a classic buffer overflow triggered via network input from a malicious PPP peer. Since ppp(8) runs as setuid root (though restricted to the "network" group), successful exploitation grants root code execution. No user authentication or interaction is required; a remote attacker needs only to establish a PPP connection. Patches are available for all supported FreeBSD versions (14.4, 15.0, 15.1).
Affected products
- FreeBSD FreeBSD All supported versions (14.4 before 2026-08-25, 15.0 before 2026-08-25, 15.1 before 2026-08-25)
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched