OpenSSH flaw CVE-2026-123158 lets attackers bypass authentication on musl libc systems
OpenSSH users running musl libc without PAM support are vulnerable to a password authentication bypass via CVE-2026-123158. Attackers can gain access to accounts with disabled passwords by providing oversized strings. Update to OpenSSH 10.6p2 immediately to prevent unauthorized access.
CVE-2026-1231582 min