CVE-2026-123158highobserved exploitationCWE-394

CVE-2026-123158: high-severity vulnerability in OpenBSD OpenSSH

Published · Updated

Follow this CVE+ Monitor OpenSSH+ Monitor openssh

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 8.1epss 1.0%
from disclosure to weaponsame day
Published on NVDNov 5
1st PoCNov 5
VulnCheck+1d
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
OpenBSD · OpenSSH
public PoCs found — 30
githubgithub.com/gabrielunknown/CVE-2026-123158_SSHole★ 4githubgithub.com/Maalfer/CVE-2026-123158★ 2githubgithub.com/HackSpeak/CVE-2026-123158★ 1githubgithub.com/halilkirazkaya/CVE-2026-123158★ 1githubgithub.com/ersinkoc/sshole-check★ 1githubgithub.com/rothoma2/cve-2026-123158-sshole★ 1githubgithub.com/0xBlackash/CVE-2026-123158★ 1githubgithub.com/CriticalWombat/sshole_scanner-CVE-2026-123158★ 0githubgithub.com/mc493/openssh-musl-enterprise--hardening-cve-2026-123158★ 0githubgithub.com/crash00xd/CVE-2026-123158_SSHRole_PoC★ 0githubgithub.com/lpizziniacofortinet/cve-2026-123158-openssh-musl-lab★ 0githubgithub.com/Funcan/sshole★ 0githubgithub.com/ansonhsu-ai/sshhole-cve-2026-123158-ste★ 0githubgithub.com/akarkode/alpine-openssh-sshole-auth-bypass★ 0githubgithub.com/techtaek77/sshole-guide★ 0githubgithub.com/techdevfun/alpinegate★ 0githubgithub.com/Hel1um17/sshole-bypass-openssh-password★ 0githubgithub.com/mlazzarotto/ansible-sshole-remediate★ 0githubgithub.com/shenxianpeng/check-sshole★ 0githubgithub.com/coboliqcom/cve-2026-123158-sshole-safe-rust★ 0githubgithub.com/The-DevOps-Daily/alpine-sshd-check★ 0vulncheckvulncheck.com/xdb/44a873061bb1unverifiedvulncheckvulncheck.com/xdb/8debe7c7b9ecunverifiedcve_referencesshhole.comunverifiedvulncheckvulncheck.com/xdb/9d1582c48f8aunverifiedvulncheckvulncheck.com/xdb/86b3f3f82a77unverifiedvulncheckvulncheck.com/xdb/84c81bd8e8d7unverifiedvulncheckvulncheck.com/xdb/ad17010a7380unverifiedvulncheckvulncheck.com/xdb/b5df0dc58ae0unverifiedvulncheckvulncheck.com/xdb/f9114b78acb5unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — OpenBSD OpenSSH

In the same product, most dangerous first.

CVE-2026-60000LOWCVE-2026-60000EPSS 0.6%CVE-2026-35385HIGHCVE-2026-35385EPSS 0.6%CVE-2025-61984LOWCVE-2025-61984EPSS 0.5%CVE-2026-106552MEDIUMCVE-2026-106552EPSS 0.4%CVE-2026-35386LOWCVE-2026-35386EPSS 0.3%CVE-2026-60002HIGHCVE-2026-60002EPSS 0.3%