2 hours ago
OpenSSH flaw lets attackers log into password-disabled Linux accounts
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 5 Nov 2026, 17:45 UTC. The headline in use is “OpenSSH flaw lets attackers log into password-disabled Linux accounts”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
OpenSSH flaw lets attackers log into password-disabled Linux accounts
Reported by 1 outlet
- BleepingComputer