OpenSSH SSHole Flaw Under Active Exploitation Hours After Disclosure

Threat actors are actively exploiting a newly disclosed OpenSSH vulnerability codenamed SSHole, tracked as CVE-2026-123158. The flaw impacts Linux systems running OpenSSH on the musl C library with PAM disabled, allowing logins to accounts without passwords and granting root access. Administrators should patch affected systems immediately.