news
The Hacker News
November 6th, 2026 at 3:21 PMHackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,
#ai
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.12
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html