⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

Threat actors are actively attempting to exploit CVE-2026-123158, a high-severity OpenSSH flaw known as SSHole. The vulnerability impacts Linux distributions utilizing the musl C library with PAM disabled, such as default Alpine Linux configurations, allowing unauthorized access to passwordless accounts. The weekly security roundup also highlights critical patches across diverse platforms including SonicWall, WatchGuard, and Synology.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module identifies exposed SSH services on internet-facing assets and banner-matches advertised OpenSSH versions to flag systems potentially vulnerable to CVE-2026-123158.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain