Tag

Cve 2026 123158

All articles tagged with #cve 2026 123158

cybersecurity1 hour ago•1 min saved

Active Exploitation of 'SSHole' Flaw Compromises Alpine Linux Servers

A critical vulnerability known as 'SSHole' is under active exploitation, allowing attackers to bypass authentication on Linux systems using the musl C library. The flaw, tracked as CVE-2026-123158, affects OpenSSH when configured without Pluggable Authentication Modules (PAM). Attackers can gain root access by submitting oversized passwords to accounts with no password set. OpenSSH and Alpine Linux have released emergency patches, urging immediate updates to prevent compromise.

via Ars Technica|

#alpine-linux #cve-2026-123158 #cybersecurity

cybersecurity3 days ago•0 min saved

SSHole Exploitation Confirmed on Honeypots Within Hours of Disclosure

Threat actors began exploiting the 'SSHole' vulnerability in OpenSSH less than nine hours after its public disclosure, successfully gaining root access on honeypots running Alpine Linux. The flaw, which dates back to a 2016 patch, allows unauthenticated attackers to bypass password checks on accounts configured without usable passwords by submitting oversized inputs. While the issue affects systems using the musl C library with Pluggable Authentication Modules disabled, it does not impact glibc-based distributions or those using PAM. Administrators are urged to update to OpenSSH 10.6p2 and audit logs for suspicious login attempts.

via The Hacker News|

#alpine-linux #cve-2026-123158 #cybersecurity

security3 days ago•1 min saved

OpenSSH 10.6p2 Patches Decade-Old 'SSHole' Flaw in Alpine Linux

A critical vulnerability dubbed 'SSHole' allows attackers to bypass password authentication on certain Linux systems by submitting an overly long password. The flaw, present since 2016, affects systems using the musl C library without Pluggable Authentication Modules (PAM). OpenSSH released version 10.6p2 on November 5, 2026, to fix the issue, while Alpine Linux issued patches for all supported branches. No active exploitation has been reported, but administrators are urged to update immediately or disable password authentication.

via The Register|

#alpine-linux #authentication-bypass #cve-2026-123158