News on this topic

OpenSSH flaw lets attackers log into password-disabled Linux accounts: A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log ...
bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/

Get root on a musl Linux system by slamming it with an overly long password: Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'
theregister.com/security/2026/11/05/get-root-on-a-musl-linux-system-by-slamming-it-with-an-overly-long-password/5307910

OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass: SSHole, a vulnerability in OpenSSH (CVE-2026-123158), allows logins to certain accounts on Linux using ...
securityweek.com/openssh-rushes-patches-for-sshole-authentication-bypass/
More articles on this subject
Previous

Alpine Linux and OpenSSH patch flaw that's as bad as it can get - ZDNET: This dangerous Linux security hole must be patched as soon as possible.
zdnet.com/tech/alpine-linux-openssh-patch-flaw/
*sshole · sshhole.com: openssh on musl linux has been letting people into password-less accounts since 2016.
sshhole.com/
Next
Similar to This
Previous

Vulnerability that lets hackers SSH into Linux devices is under active exploitation
arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation/

Hackers exploit SSHole OpenSSH flaw to breach Linux systems: Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH ...
bleepingcomputer.com/news/security/hackers-exploit-sshole-openssh-flaw-to-breach-linux-systems/

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices: Certain configurations of Alpine are affected. Other distros may be as well.
arstechnica.com/security/2026/11/vulnerability-allows-attackers-to-log-into-some-linux-devices-sans-password/

Windows has a hidden, free SSH server, and I manage every PC in my house from one terminal now
xda-developers.com/windows-has-a-built-in-ssh-server/

Alpine Linux rebuilt its GitLab server after a close call - what you should check ASAP - ZDNET
zdnet.com/tech/alpine-linux-rebuilt-gitlab-server-attack/

GitHub - abruption/dots-tailscale: User-level Tailscale and OpenSSH setup for ChatGPT Dots cloud computers
github.com/abruption/dots-tailscale

OpenSSH 10.6 deliberately breaks two features in the name of security: OpenSSH 10.6 weakens SSH compression and rejects $ and in command-line usernames to close ...
thenewstack.io/openssh-breaks-compression-usernames/
Next