NewsBleepingComputer
OpenSSH flaw lets attackers log into password-disabled Linux accounts
Teaser from the source
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on OpenSSH
Other advisories
- HighCVE-2026-123158OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
- HighCVE-2026-123158OpenBSD OpenSSH: Umgehung der Authentifizierung
- HighCVE-2026-123158OpenSSH Security Restriction Bypass Vulnerability
- HighCVE-2026-123158OpenBSD OpenSSH: Umgehung der Authentifizierung
- MediumCVE-2026-106587OpenSSH: Mehrere Schwachstellen
- Not ratedosv:OESA-2026-4692openssh security update
- Not ratedosv:OESA-2026-4691openssh security update
- Not ratedosv:OESA-2026-4690openssh security update
Other news entries
- Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on HoneypotNewsThe Hacker News
- OpenSSH Rushes Patches for ‘SSHole’ Authentication BypassNewsSecurityWeek
- Fehler bei Passwortprüfung: Angreifer können über OpenSSH Linux-Konten kapernNewsGolem.de — Security
- OpenSSH: Schwachstelle ermöglicht Erlangen von AdministratorrechtenVulnerabilityBSI CERT-Bund
- NCSC-2026-0469 [1.00] [M/H] Kwetsbaarheid verholpen in OpenSSH door OpenSSH ProjectNewsNCSC-NL
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Get root on a musl Linux system by slamming it with an overly long passwordNewsThe Register — Security
- OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxNewsThe Hacker News
ID