OpenSSH 10.6p2 Fixes a Password Bypass on musl Systems Without PAM, and Alpine Images Are the Main Exposure
CVE-2026-123158 lets some accounts accept any 257–1024 character password when sshd runs on musl without PAM. Who is exposed, Alpine's fixed packages and how to check.
· 4 min