Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot — Live Feedhttps://www.live-feeds.com/feed/hackers-target-openssh-sshole-flaw-within-hours-of-disclosure-gain-root-on-honeypotContinuously updated, source-cited coverage. OpenSSH SSHole Flaw Exploited Within Hours, Root Access Gained on Honeypothttps://www.live-feeds.com/feed/hackers-target-openssh-sshole-flaw-within-hours-of-disclosure-gain-root-on-honeypothttps://www.live-feeds.com/feed/hackers-target-openssh-sshole-flaw-within-hours-of-disclosure-gain-root-on-honeypot#u193264Wed, 11 Nov 2026 07:04:19 +0000Attackers began exploiting the OpenSSH SSHole authentication bypass, CVE-2026-123158, within nine hours of its CVE publication, according to SANS Internet Storm Center findings reported by multiple outlets. One Alpine Linux honeypot granted the attacker root access. The flaw affects OpenSSH servers on musl-based Linux systems with PAM disabled, including Alpine Linux's default configuration. An unauthenticated attacker can supply an oversized password to access accounts with no usable password, without stealing credentials or SSH keys. OpenSSH released a fix in version 10.6p2. The flaw wa