Intelligence
Critical OpenSSH bug lets attackers into some Alpine Linux servers with any long password
OpenSSH 10.6p2 fixes a critical bug that lets attackers log in to passwordless accounts on Alpine Linux and other musl systems by sending a password longer than 256 bytes. Here is who is exposed and how to fix it.
November 5, 2026 · 5 min read