VulnSocial

CVE-2026-41285Disclosure(openbsd / openbsd)

LOWCVSS 4.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.

openbsd CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-1284CWE-835

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openbsd

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
openbsd
Products
openbsd

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-21: 3Technical Details · 2026-04-21: 304-21
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-41285 In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with… https://www.cve.org/CVERecord?id=CVE-2026-41285

    Post summary

    The CVE-2026-41285 vulnerability is an infinite loop in OpenBSD's slaacd and rad daemons caused by a crafted ICMPv6 Neighbor Discovery option, with no PoC, exploit code, active exploitation evidence, or patch mentioned.

    00010178
    57.2K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-41285 In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with… https://www.cve.org/CVERecord?id=CVE-2026-41285 ----- Traducción: CVE-2026-41285 En … http://infoflow.cloud`

    Post summary

    OpenBSD's slaacd and rad daemons contain an infinite-loop flaw triggered by a crafted ICMPv6 Neighbor Discovery option; no PoC, exploit, active use, or patch information is provided.

    0000042
    72 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-41285 Infinite Loop Vulnerability in OpenBSD slaacd and rad Daemons via Crafted ICMPv6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41285

    Post summary

    The text announces a new CVE, detailing the affected components and the type of vulnerability, but does not provide a PoC, exploit code, or patch information.

    0000039
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSopenbsdopenbsd---

Explore more

Back to dashboardopenbsd CVEsopenbsd vulnerabilities