Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
· thehackernews.com · popularity 21/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 2.