Skip to content

#openssh

1 article

Security Alerts Nov 9, 2026

CVE-2026-123158: Password Authentication Bypass in OpenSSH on musl Linux

Actively exploited flaw in sshd on Linux with musl libc (e.g. Alpine) without PAM: for some accounts any password longer than 256 characters is accepted. Fixed in OpenSSH 10.6p2...