SecurityNov 07, 2026
SSHole: The OpenSSH Password Bypass Affecting Some musl Linux Systems
SSHole (CVE-2026-123158) can let specially crafted, overlong passwords authenticate as accounts whose password field is locked. Learn which musl-based systems may be affected, why Alpine Linux and exposed Docker hosts deserve attention, and how to fix and investigate them.
