Summary

Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]

For more information, read the full story at the original source: BleepingComputer ↗

Vulnerabilities in this story

• CVE-2026-123158 KEV · fix by 2026-11-12 OpenBSD OpenSSH EPSS 1% 8.1High

Also reported by

• SecurityWeek: Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH ↗
• ZDNet How-to: Alpine Linux and OpenSSH patch flaw that’s as bad as it can get ↗
• The Hacker News: Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot ↗
• Help Net Security: OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) ↗