Scans for Sshole Vulnerability (CVE-2026-123158)
Our honeypots use "Cowrie" to collect SSH data. With the emergence of the "sshole" vulnerability last week, we are now seeing an increase in attempts to exploit the vulnerability. Our data is a bit limited in this respect. Our honeypots collect only the first 255 characters of SSH passwords. Longer passwords are highly unusual and not used for the usual password brute-forcing we observe.
Read at SANS Internet Storm Center
- EPSS
- 0.010 (p63)
Why it ranks 22 (Routine)
- Covered by 3 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- SANS Internet Storm Center (isc.sans.edu)
- CVE-2026-123158 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.