OpenSSH Flaw (CVE-2026-123158) Exploited in the Wild Hours After Disclosure

A critical OpenSSH vulnerability, dubbed 'sshole' (CVE-2026-123158), is being actively exploited in the wild, allowing remote attackers to log into passwordless accounts on Alpine Linux and other musl-based systems. The flaw, which was fixed in OpenSSH 10.6p2 on November 5, 2026, enables attackers to bypass authentication with a single connection. Threat intelligence firm Previdian has observed exploitation attempts, highlighting the rapid pace at which attackers are leveraging newly disclosed vulnerabilities, potentially aided by AI.