Topic

Cve 2026 123158

Coverage tagged cve 2026 123158.

Articles: 1
Desk: 1

Data graphic: CVE-2026-123158, CVSS 8.1, OpenSSH musl password bypass accepting any 257 to 1024 character password.

highExploits Cve 2026 123158

OpenSSH 10.6p2 Fixes a Password Bypass on musl Systems Without PAM, and Alpine Images Are the Main Exposure

CVE-2026-123158 lets some accounts accept any 257–1024 character password when sshd runs on musl without PAM. Who is exposed, Alpine's fixed packages and how to check.

Nov 8 · 4 min