CVE-2026-123158: OpenSSH musl auth bypass enables RCE
Exploitation confirmed in the wild for musl-based OpenSSH before 10.6p2; fixed in 10.6p2 with Alpine backports.
85
Organization
Alpine Linux
- Mentions · 7d5
- Mentions · 30d5
- All mentions5
- First seenNov 5, 2026
- Last mentioned2d ago
Timeline
5 articles · newest firstHackers Exploit OpenSSH SSHole Flaw Within Hours of Disclosure
Attackers gain root access on Alpine Linux honeypot via CVE-2026-123158; patch released in OpenSSH 10.6p2
75
OpenSSH sshole flaw exploited in the wild hours after disclosure (CVE-2026-123158)
Previdian detected successful root access on an Alpine Linux honeypot within hours of disclosure.
80
OpenSSH flaw lets attackers log into password-disabled Linux accounts
Attackers can log into accounts with asterisk password hashes on musl-based systems by submitting oversized passwords; fixed in OpenSSH 10.6p2.
50
OpenSSH 10.6p2 fixes long password bypass on Alpine Linux SSH
Long passwords bypass SSH authentication for passwordless accounts on Alpine Linux; OpenSSH 10.6p2 and Alpine updates released.
80
Related CVEs
by mentions- CVE-2026-1231581%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
Appears with
- OpenSSHvendor · 5
- Previdianorganization · 2
- Safe Securityorganization · 1
- openssh-serverproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.