OpenSSH SSHole Flaw: Root on a Plate for Botnet Scanners
The OpenSSH SSHole flaw (CVE-2026-123158) gave attackers root on an Alpine honeypot in nine hours. Here is why passwordless containers feed botnets.
OpenSSH is the default SSH daemon on the overwhelming majority of Linux servers, containers and embedded devices, and every unauthenticated flaw in sshd — like the SSHole bug — hands attackers root on infrastructure that later joins a DDoS botnet.
The OpenSSH SSHole flaw (CVE-2026-123158) gave attackers root on an Alpine honeypot in nine hours. Here is why passwordless containers feed botnets.