authentication bypass

cve | cybersecurity | Threat Intelligence | zero day

OpenSSH ‘SSHole’ CVE-2026-123158: Unauthenticated Root on Alpine Linux, Exploited Within Hours
By

CVE-2026-123158 (“SSHole”) lets any unauthenticated attacker log into locked accounts on Alpine Linux — the base image for the majority of Docker containers. CVSS 8.1. Exploited within nine hours of disclosure. The fix is a package upgrade plus a daemon restart; upgrading alone is not enough.

Read More OpenSSH ‘SSHole’ CVE-2026-123158: Unauthenticated Root on Alpine Linux, Exploited Within Hours
cve | cybersecurity | Threat Intelligence

SonicWall SSL-VPN MFA Bypass CVE-2026-19868: CISA Adds to KEV, Nov 20 Deadline — Gen 6 Devices Stranded Without a Fix
By

SonicWall’s SSL-VPN has a confirmed-exploited authentication flaw that lets an attacker with ordinary stolen credentials bypass your SAML-enforced MFA entirely. CISA added it to the Known Exploited Vulnerabilities catalog on November 6. The Gen 8 patch only shipped the same day. Gen 6 devices will never get a fix. DataWater Threat Intelligence Desk | Published…

Read More SonicWall SSL-VPN MFA Bypass CVE-2026-19868: CISA Adds to KEV, Nov 20 Deadline — Gen 6 Devices Stranded Without a Fix