#CVE-2026-123158
Articles
Security
OpenSSH 'SSHole' flaw lets passwords of 257 to 1,024 characters log into passwordless accounts on musl Linux without PAM; fixed in OpenSSH 10.6p2
A long-standing OpenSSH flaw on musl Linux without PAM, such as default Alpine, lets 257 to 1,024 character passwords into passwordless accounts.