sshole: OpenSSH Fixes Password Bypass on Alpine Linux

OpenSSH has shipped an emergency release, version 10.6p2, to stop a password bypass that lets a remote attacker log in to accounts that have no password set. The flaw, tracked as CVE-2026-123158 and nicknamed “sshole,” affects Linux systems that run OpenSSH on the musl C library with PAM disabled. That combination is the default openssh-server […]

Vulnerabilities & Zero-Day Operating Systems
Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
SOCRadar

Refrigeration Cyberattacks Draw FBI and CISA Warning

Five U.S. federal agencies have issued a joint warning about refrigeration cyberattacks, saying threat actors are targeting refrigeration controllers and electronic temperature controllers in retail grocery and cold storage facilities. The fact sheet, released on November 5, 2026, by CISA, the FBI, HHS, USDA and the Department of Transportation, says attackers can remotely alter settings […]