https://seclists.org/oss-sec/2026/q4/570: "sshole": password authentication bypass: OpenSSH + musl libc
Published Nov 7, 2026
·Updated
Affected Software
2 affected components
OpenBSD OpenSSH
musl musl libc
The discussion says attackers typically begin with pregenerated lists of known or probable account names. Examples mentioned include root, daemon, ldap, postfix, apache, mysql, sshd, and rumpelstiltskin.