CVE-2026-123158

CVE

Threat entity extracted from intelligence sources

Frequency

19

occurrences

First Seen

November 5, 2026

Last Seen

November 6, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical OpenSSH Vulnerability Allows Password Bypass on Alpine Linux72.0

On November 5, 2026, OpenSSH released version 10.6p2 to address CVE-2026-123158, a critical vulnerability that allows attackers to bypass password authentication on Alpine Linux and other musl-based systems. The flaw, discovered by Özgün Kültekin, enables unauthorized access to accounts with no pass...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical OpenSSH Vulnerability Allows Password Bypass on Alpine Linux

1d ago·39 sources

Related Articles (19)

CVE 2026 123158

previdian.com·18h ago

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

Helpnetsecurity·19h ago

Exploit for CVE-2026

Sploitus·19h ago

OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass

Securityweek·20h ago

Exploit for CVE-2026

Sploitus·21h ago

1 / 4

Related Entities

Zero-day Exploit Brute Force Authentication Bypass Japan CVE-2026-43499 CWE-287 - Improper Authentication Pam T1078 - Valid Accounts T1110 - Brute Force T1021 - Remote Services T1059 - Command and Scripting Interpreter OpenSSH