importantSYS.SOURCE: The Hacker News• 2026-11-06T20:51:49+05:30

CVE-2026-123158: Rapid Exploitation of OpenSSH Vulnerability Enables Root Access

#vulnerability #openssh #exploit #security

A critical OpenSSH vulnerability (CVE-2026-123158) allows unauthorized root access on Linux systems using musl C library with PAM disabled. Attackers exploited the flaw within hours of disclosure, demonstrating rapid malicious activity.

Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian.

The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole), impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules (PAM) disabled,

Read original article

*** END OF TRANSMISSION ***

> APPLE REPORTS OVER 100,000 APPS OPTIMIZED FOR IPHONE DUO > AI-DRIVEN ACCELERATION IN AI RESEARCH AND ITS IMPLICATIONS > HYBRID LLM MODEL COMBINING JEV AND OPUS ACHIEVES 4X COST REDUCTION IN IDENTITY RESOLUTION > AI AGENTS AUTOMATE LEGO MECHANISM ANIMATION FROM LDRAW MODELS > JAPANESE RURAL DEPOPULATION LINKED TO BIODIVERSITY LOSS > EXPLOITING FIRECRACKER MICROVMS FOR GUEST-TO-HOST CODE EXECUTION VIA KERNEL MANIPULATION > REBECCA WEST'S TELEGRAM: A PERSONAL REFLECTION > SOPHISTICATED RESTAURANT DELIVERY PAYMENT-SKIMMING OPERATION UNCOVERED > REPLIT'S MICROVM-BASED SANDBOX ENGINE ENHANCES SECURITY AND SCALABILITY > HUNDREDS OF ARTEX AI HACKING TOOLS EXPOSED ONLINE, POSE CYBERSECURITY RISKS> APPLE REPORTS OVER 100,000 APPS OPTIMIZED FOR IPHONE DUO > AI-DRIVEN ACCELERATION IN AI RESEARCH AND ITS IMPLICATIONS > HYBRID LLM MODEL COMBINING JEV AND OPUS ACHIEVES 4X COST REDUCTION IN IDENTITY RESOLUTION > AI AGENTS AUTOMATE LEGO MECHANISM ANIMATION FROM LDRAW MODELS > JAPANESE RURAL DEPOPULATION LINKED TO BIODIVERSITY LOSS > EXPLOITING FIRECRACKER MICROVMS FOR GUEST-TO-HOST CODE EXECUTION VIA KERNEL MANIPULATION > REBECCA WEST'S TELEGRAM: A PERSONAL REFLECTION > SOPHISTICATED RESTAURANT DELIVERY PAYMENT-SKIMMING OPERATION UNCOVERED > REPLIT'S MICROVM-BASED SANDBOX ENGINE ENHANCES SECURITY AND SCALABILITY > HUNDREDS OF ARTEX AI HACKING TOOLS EXPOSED ONLINE, POSE CYBERSECURITY RISKS