Security · 7 November 2026
Threat Actors Exploit OpenSSH ‘SSHole’ Flaw to Gain Access on Alpine Systems
Within hours of disclosure, attackers began exploiting CVE‑2026‑123158, a vulnerability in OpenSSH on musl‑based Linux systems that allows authentication without a password. The SSHole flaw is fixed in OpenSSH 10.6p2 but affects configurations with PAM disabled, such as Alpine Linux’s default setup.
Why it matters
Update product security checklists to verify OpenSSH versions are at least 10.6p2, preventing exposure to the SSHole vulnerability in Linux deployments.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 7 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.