OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

T2Covered by 1 source · first reported by Help Net Security at 06 Nov, 12:49 UTC

An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was fixed in OpenSSH 10.6p2…

sciencesecurity

Sources

• T2OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)Help Net Security06 Nov, 12:49

Vulnerabilities

• CVE-2026-123158