# OpenSSH flaw draws exploitation attempts against specific Linux configurations

_Published Monday, November 9, 2026 at 10:07 AM EST · Security · Latest · Tier 2 — Notable_

![OpenSSH flaw draws exploitation attempts against specific Linux configurations — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLQ4v79OUmrbGdf2uJWMlUUmpCSu70Pr6v7oyodgSjFMfLU6JIe6Mr7xpp7AnqIX_vmKca44ImxEkczL88e_4sr2oBw0NL3Zh_JVEOb4cYmYg5pjbrITVv6KgPsv13-RrlBjq6bu7inR7w5-seDsUZvoqn6q7idkElfWysH1itsfgI5-NmFZ-BybjG0gR0/s1700-nu-rw-lo-l85-e365/rr.jpg)

Attackers are attempting to exploit an OpenSSH vulnerability that can permit sign-ins to accounts without passwords, The Hacker News reported. As of November 9, 2026, 20 exploitation attempts had been recorded from 13 unique IP addresses.

The flaw, tracked as CVE-2026-123158 and nicknamed SSHole, affects Linux systems running OpenSSH with the musl C library and Pluggable Authentication Modules disabled. That scope includes Alpine Linux's default OpenSSH server configuration. It carries a CVSS severity score of 8.1. The reported activity establishes exploitation attempts, rather than confirmed successful intrusions.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/weekly-recap-sshole-exploited-apt-root.html)

---
Canonical: https://techandbusiness.org/newswire/AD7fqavU_3BGHMZ9eaIwxT
Published: 2026-11-09T15:07:52.157Z
Story chronology: 2026-11-09T13:28:00.000Z
Retrieved: 2026-11-09T16:56:45.318Z
Publisher: Tech & Business (techandbusiness.org)