← Latest

OpenSSH flaw lets attackers log into password-disabled Linux accounts

Opened

bleepingcomputer.com Nov 5, 2026 appsecvulnidentitysupply-chain

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]