Summary

This dangerous Linux security hole must be patched as soon as possible.

For more information, read the full story at the original source: ZDNet How-to ↗

Vulnerabilities in this story

• CVE-2026-123158 KEV · fix by 2026-11-12 OpenBSD OpenSSH EPSS 16.5% 8.1High

Also reported by

• Ars Technica: Vulnerability that lets hackers SSH into Linux devices is under active exploitation ↗
• SecurityWeek: Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH ↗
• BleepingComputer: Hackers exploit SSHole OpenSSH flaw to breach Linux systems ↗
• The Hacker News: Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot ↗
• Help Net Security: OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) ↗