#5
Schneier on Security
threat-intel
November 10, 2026 at 12:02 UTC
New OpenSSH Vulnerability
By Bruce Schneier
AI Summary
A decade-old vulnerability in OpenSSH combined with the musl C library, dubbed '*sshole,' allows attackers to authenticate to affected accounts — including those configured to block password authentication — simply by submitting a password longer than 256 bytes. The flaw impacts Alpine Linux and other musl-based Linux distributions and is under active exploitation. CISA has added the OpenSSH flaw to its Known Exploited Vulnerabilities catalog, urging immediate patching.
Relevance score: 87.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →