OpenSSH flaw draws exploitation attempts against specific Linux configurations

Attackers are attempting to exploit an OpenSSH vulnerability that can permit sign-ins to accounts without passwords, The Hacker News reported. As of November 9, 2026, 20 exploitation attempts had been recorded from 13 unique IP addresses. The flaw, tracked as CVE-2026-123158 and nicknamed SSHole, affects Linux systems running OpenSSH with the musl C library and Pluggable Authentication Modules disabled. That scope includes Alpine Linux's default OpenSSH server configuration. It carries a CVSS severity score of 8.1. The reported activity establishes exploitation attempts, rather than confirmed successful intrusions.