Topics

alpine-linux

09.11.2026 / news

SSHole: OpenSSH Password Bypass Flaw Exploited Within Hours of Disclosure

OpenSSH flaw CVE-2026-123158 ("SSHole") lets an oversized password log into passwordless accounts on musl-based systems like Alpine. Exploitation began within hours of disclosure; update to 10.6p2 and restart sshd.

← All topics