CVE-2026-123158: OpenSSH Login Bypass on Alpine Linux (sshole)
On Alpine Linux and other musl-based systems, a very long password could open accounts that were never meant to accept one. Attacks…
Tag: Security
CVE-2026-98432: Critical Linux TCP Bug and How to Patch It
A race in the way the Linux kernel handles IPv4 options during the TCP handshake can be triggered remotely, before any login.…
Node.js October 2026 Security Release: Brotli RCE and TLS Fixes
Node.js 26.12.1, 24.22.1 and 22.23.4 fix ten vulnerabilities, four of them rated high. Here is what each serious bug does, who needs…
PHP2Shell (CVE-2026-109618): How to Patch PHP on Your Server
Two critical bugs in the PHP engine can let an anonymous visitor run code on a web server. Here is which versions…
Linux VPS Security Checklist 2026: 12 Steps for a New Server
Twelve steps, with the exact commands for Ubuntu, Debian, AlmaLinux and Rocky Linux, that close the gaps most VPS break-ins come through.…