OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was fixed in OpenSSH 10.6p2 on November 5. “An attacker who can reach your SSH port can log in without knowing any password. It takes one connection,…

آسیب‌پذیری و روز صفر هوش تهدید سیستم‌عامل
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CyberInsider

Mullvad Browser 16.0 switches DNS to Quad9, adds window title privacy

Mullvad Browser 16.0 introduces a privacy setting that keeps other apps from reading webpage titles through the browser’s window name. The release also switches encrypted DNS to Quad9, reorganizes the settings menu, and adds native support for 64-bit ARM Linux systems. Mullvad detailed the changes on November 6, following the October 29 release of version … The post Mullvad Browser 16.0 switches DNS to Quad9, adds wi…

Cisco Security Advisories

Vulnerabilities in PHP Affecting Cisco Products: October 2026

On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vulnerabilities, see the advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. These vulnerabilities are being referenced as PHP2shell. For information about Splunk pr…