Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)
2026-11-09T01:23:41Z•32764a987f888abafbd319092e59ad4a754392d2ddc93eb39d59ef61fb1b0c4a
CVE-2000-0411CVE-2023-20198CVE-2026-123158CVE-2026-98432cisco-ioscowrieexploit-attemptshoneypotmultipath-tcponeNotesshthreat-intelligencevulnerability-scanningweb-application-security
What happened
SANS Internet Storm Center diary feed covering observed exploitation and scanning activity, including SSH “sshole” vulnerability probing (CVE-2026-123158), suspected exploitation of Cisco IOS CVE-2023-20198, historical CGI email-script vulnerabilities, and Linux Multipath TCP vulnerability CVE-2026-98432. The most actionable item is increased SSH exploitation activity observed by Cowrie honeypots.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 32764a987f888abafbd319092e59ad4a754392d2ddc93eb39d59ef61fb1b0c4a
- Enrichment time
- 2026-11-09T01:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.