#2
The Hacker News
general
November 06, 2026 at 15:21 UTC
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
By [email protected] (The Hacker News)
AI Summary
CVE-2026-123158 (CVSS 8.1), dubbed 'SSHole,' targets OpenSSH on Linux systems running the musl C library with PAM disabled, allowing unauthenticated root login to accounts with no password set. Threat actors began exploitation attempts within hours of disclosure, with Previdian researchers confirming root access achieved on a honeypot, underscoring the urgency of patching affected systems.
Relevance score: 87.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →