– A newly disclosed security vulnerability in OpenSSH could allow attackers to bypass SSH password authentication and gain unauthorised access to Linux systems. The vulnerability, tracked as CVE-2026-123158 and nicknamed “sshole”, affects certain Linux installations using the musl C library without PAM authentication.