Home / Nov 08, 2026 / Story
0
#2 The Hacker News general November 06, 2026 at 15:21 UTC

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

By [email protected] (The Hacker News)

AI Summary

CVE-2026-123158 (CVSS 8.1), dubbed 'SSHole,' targets OpenSSH on Linux systems running the musl C library with PAM disabled, allowing unauthenticated root login to accounts with no password set. Threat actors began exploitation attempts within hours of disclosure, with Previdian researchers confirming root access achieved on a honeypot, underscoring the urgency of patching affected systems.

Relevance score: 87.0/100

# More from November 08