Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Summary
Hackers are actively exploiting CVE-2026-123158, a vulnerability in OpenSSH when used with musl, enabling unauthenticated access to high-privilege accounts on Linux systems. Multiple firms report mature intrusions and backdoor activity (TAC Agent), with patches available and widespread exploitation expected, particularly on Alpine Linux.