{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/openssh--10.6p2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-123158"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenSSH (\u003c 10.6p2)","openssh-server","openssh-server-pam"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpenSSH"],"content_html":"\u003cp\u003eOpenSSH 10.6p2 introduces a fix for a password authentication bypass vulnerability that affects systems built and running with PAM support disabled. While the OpenSSH maintainers state the root cause lies within the underlying musl libc, the flaw is exploitable via sshd. Alpine Linux is specifically identified as a system configuration where this issue is present. This vulnerability has been referred to as \u0026quot;sshole\u0026quot; in public disclosures.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows an unauthenticated attacker to bypass password-based authentication mechanisms in sshd when the system is configured to use musl libc without PAM support, potentially leading to unauthorized remote access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade OpenSSH to version 10.6p2 or later on all systems using musl libc where PAM is not enabled.\u003c/li\u003e\n\u003cli\u003eAudit existing server configurations to determine if PAM support is disabled in current OpenSSH installations.\u003c/li\u003e\n\u003cli\u003ePrioritize patching for Alpine Linux environments or similar distributions relying on musl libc.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T20:26:45Z","date_published":"2026-11-05T20:26:24Z","id":"https://feed.craftedsignal.io/briefs/2026-11-openssh-auth-bypass/","summary":"OpenSSH 10.6p2 addresses a password authentication bypass vulnerability affecting systems that utilize musl libc with PAM support disabled, such as Alpine Linux.","title":"OpenSSH: Password authentication bypass (sshole)","url":"https://feed.craftedsignal.io/briefs/2026-11-openssh-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenSSH (\u003c 10.6p2)","version":"https://jsonfeed.org/version/1.1"}