Topics
ssh
SSHole: OpenSSH Password Bypass Flaw Exploited Within Hours of Disclosure
OpenSSH flaw CVE-2026-123158 ("SSHole") lets an oversized password log into passwordless accounts on musl-based systems like Alpine. Exploitation began within hours of disclosure; update to 10.6p2 and restart sshd.
Critical Crypto Bug Fixed in PuTTY
Many versions of the PuTTY client have a subtle vulnerability that can allow an attacker to compromise some private keys and then forge signatures to log into remote servers.