In talking of computer security, we often use the term "hole" to refer to a security flaw. We also say vulnerability or exploit.
Instead of calling it a hole, I suggest calling it a "window." As in "Somebody found a window into ssh" or "They got in through a window left open in Sendmail."
The plural is left as an exercise to the reader.