Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

Threat actors are exploiting a recently disclosed OpenSSH flaw, CVE-2026-123158 (CVSS 8.1), codenamed SSHole, within hours of disclosure, according to Previdian. The vulnerability allows sign-ins to accounts without passwords and impacts Linux systems running OpenSSH on the musl C library with PAM disabled. Attackers gained root on a honeypot, highlighting the urgency of patching.