Overview Recently, NSFOCUS CERT monitored that OpenSSH released a security update fixing the OpenSSH/musl password authentication bypass vulnerability (CVE-2026-123158). Because crypt() in musl libc returns "*" upon failure, when the target account's password field is "*" and other accounts using password hashes exist on the system while SSH password authentication...
