FlagThis — Daily Cybersecurity Intelligence Briefing

CVE-2026-123158, dubbed "SSHole," is a critical unauthenticated password authentication bypass in OpenSSH sshd specifically affecting Alpine Linux due to a flaw in its interaction with musl libc. This vulnerability allows remote attackers to bypass authentication and gain root privileges on locked accounts without valid credentials. Weaponization occurred within nine hours of public disclosure. Given Alpine's widespread adoption as a Docker base image, the vulnerability poses a severe risk to containerized environments, CI/CD pipelines, and cloud-native infrastructure. Remediation requires both updating the OpenSSH package and manually restarting the sshd daemon to eliminate vulnerable resident processes.