The Hacker News · 11/6/2026

OpenSSH Authentication Bypass on Alpine Linux (CVE-2026-123158 SSHole)

Critical OpenSSH flaw allows passwordless account login on Alpine Linux with musl C library (no PAM); 257-1024 byte password triggers bypass; exploited within hours of disclosure.

Read original coverage