https://www.live-feeds.com/feed/meet-sshole-the-vulnerability-that-lets-hackers-ssh-into-linux-devicesContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/meet-sshole-the-vulnerability-that-lets-hackers-ssh-into-linux-deviceshttps://www.live-feeds.com/feed/meet-sshole-the-vulnerability-that-lets-hackers-ssh-into-linux-devices#u194477Wed, 11 Nov 2026 16:56:08 +0000Threat actors are actively exploiting a high-severity authentication bypass vulnerability in OpenSSH tracked as CVE-2026-123158 and codenamed SSHole or *sshole. The flaw carries a CVSS score of 8.1 and impacts Linux systems running OpenSSH on the musl C library with Pluggable Authentication Modules disabled, such as the default OpenSSH server configuration on Alpine Linux. Unauthenticated attackers can supply passwords exceeding 256 characters to gain unauthorized access to accounts configured without usable passwords. Emergency fixes have been released by OpenSSH and musl-libc for millions of