VulnerabilitiesExploitedCVE-2026-102895CVSS 9.84 min read
SignalWire says the FreeSwitch code injection flaw has been exploited in the wild; CISA's KEV listing gives federal agencies until 12 November 2026 to apply mitigations.
VulnerabilitiesExploitedCVE-2026-123158CVSS 8.14 min read
Attackers are using a password authentication bypass in OpenSSH on musl-based Linux to log into accounts whose password field is set to an asterisk, then hunting for keys, hashes and cloud metadata.
VulnerabilitiesExploitedCVE-2026-123158CVSS 8.12 min read
WatchTowr and Previdian say attackers are hitting the recently patched OpenSSH flaw; so far the traffic looks like botnets and crypto miners.
VulnerabilitiesExploitedCVE-2026-123158CVSS 8.12 min read
Previdian says attackers went after the musl-without-PAM password bypass quickly, and one honeypot gave up root. The bug only bites a narrow set of builds.
VulnerabilitiesExploitedCVE-2026-123158CVSS 8.12 min read
On Alpine and other musl libc builds with PAM disabled, some accounts accept any password between 257 and 1,024 characters. Fixes are in OpenSSH 10.6p2.
VulnerabilitiesBrief2 min read
The bug only hits OpenSSH built against musl, which covers Alpine Linux, OpenWRT, BuildRoot and Yocto. Patches went out a day after the report.
VulnerabilitiesBrief1 min read
A password of 257 to 1,024 bytes gets past SSH authentication on some Alpine servers running the standard openssh-server package, including accounts with no password set.
VulnerabilitiesCVE-2016-6210CVSS 5.92 min read
A researcher says the bug has been in OpenSSH since 2016 and only bites on musl-based systems with password auth on and PAM off. It's fixed in OpenSSH 10.6p2.
