Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian.
The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,
This article has been indexed from The Hacker News
Read the original article:
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot