Flaw lets attackers log into Linux accounts with password login disabled under some configurations. CERT-FR alert ALE-015 (Nov 5); exploitation within hours; Python backdoor seen; added to KEV Nov 9 with GPUStack CVE-2026-102895, FreeSWITCH CVE-2026-116779 and IBM Aspera Faspex CVE-2026-123218.
OpenSSH flaw lets attackers log into password-disabled Linux accounts
⚠️ Vulnérabilité OpenSSH. 📢 Le @CERT_FR a publié un bulletin d'alerte relatif à une vulnérabilité affectant OpenSSH et qui permet à un attaquant de contourner l’authentification d'un service SSH. Plus d'informations sur le site du CERT-FR : 🔗
🚨 OpenSSH flaw exploited within hours of disclosure. Attackers are targeting CVE-2026-123158 (SSHole), which bypasses password authentication under specific #Linux configurations. Root access confirmed on an Alpine Linux honeypot. Details:
🛡️️️We added 4 CVEs to our Known Exploited Vulnerabilities Catalog. Visit & apply mitigations to protect your org. #Cybersecurity #InfoSec
🚨 CISA adds 4 actively exploited flaws to its KEV catalog, affecting OpenSSH, GPUStack, FreeSWITCH, and IBM Aspera Faspex. OpenSSH SSHole attacks have already involved TAC Agent malware deployment, botnet activity, and cryptomining. What we know →
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
Why this score
Plan rubric with caps (verified sweep, Nov 11)