CyberPulse Cybersecurity News, with Source Links
FA
Orca Security

*sshole: OpenSSH Authentication Bypass Gives Attackers Root on Alpine Linux

A critical authentication bypass, with no CVE assigned yet, was disclosed in OpenSSH on musl-based Linux distributions such as Alpine. An unauthenticated attacker can log in over SSH password authentication as an account that should not accept passwords at all, including root. On a default Alpine install that means root access from a single connection, […]

Vulnerabilities & Zero-Day Operating Systems Identity & Access Security
Read the full article at Orca Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
AWS Security Bulletins

CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the database process. - CVE-2026-119924: A memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authen…

Vulnerabilities & Zero-Day Botnet & DDoS Databases
Source
AWS Security Bulletins

CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that creates AWS Systems Manager (SSM) documents (Rex-RO and Rex-RW) for running scripts on managed instances. Due to how the example script handled input parameters, a user with permissions to in…

Vulnerabilities & Zero-Day Cloud Computing Operating Systems
Source