Summary

CISA has added CVE-2026-123218 and CVE-2026-116779 to KEV, urging federal agencies to patch them within three days. The post IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks appeared first on SecurityWeek .

For more information, read the full story at the original source: SecurityWeek ↗

Vulnerabilities in this story

• CVE-2026-102895 KEV · fix by 2026-11-12 gpustack gpustack EPSS 0.3% 9.8Critical
• CVE-2026-116779 KEV · fix by 2026-11-12 signalwire freeswitch EPSS 1.2% 9.8Critical
• CVE-2026-123218 IBM Aspera Faspex EPSS 0.3% 9.8Critical
• CVE-2026-123158 KEV · fix by 2026-11-12 OpenBSD OpenSSH EPSS 1% 8.1High

Also reported by

• The Hacker News: CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws ↗
• Ars Technica: Vulnerability that lets hackers SSH into Linux devices is under active exploitation ↗
• BleepingComputer: Hackers exploit SSHole OpenSSH flaw to breach Linux systems ↗