نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Orca Security

*sshole: OpenSSH Authentication Bypass Gives Attackers Root on Alpine Linux

A critical authentication bypass, with no CVE assigned yet, was disclosed in OpenSSH on musl-based Linux distributions such as Alpine. An unauthenticated attacker can log in over SSH password authentication as an account that should not accept passwords at all, including root. On a default Alpine install that means root access from a single connection, […]

آسیب‌پذیری و روز صفر سیستم‌عامل امنیت هویت و دسترسی
خواندن متن کامل در Orca Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
AWS Security Bulletins

CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the database process. - CVE-2026-119924: A memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authen…

آسیب‌پذیری و روز صفر بات‌نت و DDoS پایگاه داده
منبع
AWS Security Bulletins

CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that creates AWS Systems Manager (SSM) documents (Rex-RO and Rex-RW) for running scripts on managed instances. Due to how the example script handled input parameters, a user with permissions to in…

آسیب‌پذیری و روز صفر رایانش ابری سیستم‌عامل
منبع