OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
2026-11-06T14:51:41Z•2836034ffbf1855cfac0c9747e23ab81ae9377fd371471047247a10aee69f803
CVE-2026-123158CVE-2026-96951AI governanceAlpine LinuxOpenSSHSSHWhite Houseactive exploitationcredential theftcritical infrastructurecyber resiliencedeveloper riskmusloperational technologypatch managementphishingrefrigeration systemsremote accessrepository tokensresidential proxiessupply-chain riskzero-day
What happened
Help Net Security reporting highlights active exploitation of a newly disclosed OpenSSH vulnerability (CVE-2026-123158) enabling unauthenticated remote login to passwordless accounts on Alpine Linux and other musl-based systems; the issue is fixed in OpenSSH 10.6p2. Additional coverage includes suspected residential proxy traffic exiting the White House network, attacks targeting refrigeration controllers protecting food and medicine, persistent repository-token exposure, AI governance gaps, phishing against vacation-rental users, and general cyber resilience and vulnerability-management risks
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 2836034ffbf1855cfac0c9747e23ab81ae9377fd371471047247a10aee69f803
- Enrichment time
- 2026-11-06T14:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.