Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
- ID
- 43924
- Status
- new
- Published
- 06 Nov 2026, 11:21 PM
- Fetched
- 07 Nov 2026, 2:50 AM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Excerpt
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,
Summary
No summary yet. It will appear after the daemon summarizes this item.