Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 00:23:24 +0000 certfr-2026-avi-1468 — Une vulnérabilité a été découverte dans OpenSSH. Elle permet à un attaquant de provoquer un contournement de la politiq… https://db.gcve.eu/vuln/certfr-2026-avi-1468 certfr-2026-avi-1468 https://db.gcve.eu/vuln/certfr-2026-avi-1468 fkie_cve-2026-123158 https://db.gcve.eu/vuln/fkie_cve-2026-123158 <p>sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.</p> <p>sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.</p> https://db.gcve.eu/vuln/fkie_cve-2026-123158 GHSA-4fcc-vm97-gx3x https://db.gcve.eu/vuln/ghsa-4fcc-vm97-gx3x <p>sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.</p> <p>sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.</p> https://db.gcve.eu/vuln/ghsa-4fcc-vm97-gx3x NCSC-2026-0469 — Kwetsbaarheid verholpen in OpenSSH door OpenSSH Project https://db.gcve.eu/vuln/ncsc-2026-0469 NCSC-2026-0469 https://db.gcve.eu/vuln/ncsc-2026-0469