CISA has flagged active exploitation of SSHole, an OpenSSH authentication bypass (CVE-2026-123158) that lets remote attackers access certain Linux accounts without a valid password or SSH key. The OpenSSH flaw affects specific server configurations, carries a CVSS score of 8.1, and was added to CISA’s KEV catalog on November 9, 2026, with a November 12 […]
This article has been indexed from Cyber Security News
Read the original article:
CISA Confirms Hackers are Exploiting SSHole, the OpenSSH Vulnerability