ChordNews
← All news

Attackers Attempt to Exploit OpenSSH SSHole Flaw That Can Allow Sign-Ins to Accounts With No Password

By ChordNews · First written

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
Image: thehackernews.com
Comments 0

Summary

Threat actors are attempting to exploit a recently disclosed OpenSSH security flaw, tracked as CVE-2026-123158 with a CVSS score of 8.1 and codenamed SSHole, according to Previdian. The flaw can enable sign-ins to accounts that have no password set. It affects Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled. The source article is cut off after that point, so further technical details are not available from it.

This continues an earlier story: Attackers Target Unpatched Maximum-Severity CryptoPayment Gateway WordPress Plugin Flaw

Timeline

  1. The Hacker News

    Source ↗

    The Hacker News reports that threat actors are attempting to exploit the recently disclosed OpenSSH flaw CVE-2026-123158 (CVSS 8.1), codenamed SSHole, which can enable sign-ins to accounts with no password set on Linux systems running OpenSSH on musl with PAM disabled, according to Previdian.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews