CVE-2019-5021

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 5, 2026

Last Seen

November 6, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical OpenSSH Vulnerability Allows Password Bypass on Alpine Linux72.0

A critical vulnerability, tracked as CVE-2026-123158, has been discovered in OpenSSH affecting Alpine Linux and other musl-based systems. The flaw allows attackers to bypass password authentication for accounts configured with no password by entering a long password (between 257 and 1,024 characters...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical OpenSSH Vulnerability Allows Password Bypass on Alpine Linux

14h ago·16 sources

Related Articles (2)

SSH Authentication Bypass on Alpine Linux: 257-Byte Password Authenticates as Root via musl crypt() Bug Decryption Digest - Cybersecurity Threat Intelligence / 52min A bug in musl libc's crypt() function lets any password of 257 bytes or longer authenticate as root, or as any user whose account is configured to accept only SSH keys, on Alpine Linux 3.16 and later. 257 — bytes is the minimum password length needed to trigger the musl crypt() failure that returns * and matches a locked account's s

www.decryptiondigest.com·6h ago

OpenSSH Alpine Bug Lets a Long Password Unlock Locked Accounts

Pasqualepillitteri.It·15h ago

Related Entities

Zero-day Exploit Debian Ubuntu CVE-2026-98432 CVE-2026-123158 CWE-287 - Improper Authentication Pam Alpine Linux OpenSSH Alpine Cloud Images Docker Images Dropbear