Summary

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the…

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-102895 KEV · fix by 2026-11-12 gpustack gpustack EPSS 0.5% 9.8Critical
• CVE-2026-116779 KEV · fix by 2026-11-12 signalwire freeswitch EPSS 2.1% 9.8Critical
• CVE-2026-123218 KEV · fix by 2026-11-12 IBM Aspera Faspex EPSS 0.7% 9.8Critical
• CVE-2026-123158 KEV · fix by 2026-11-12 OpenBSD OpenSSH EPSS 16.5% 8.1High

Also reported by

• The Hacker News: CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws ↗
• SecurityWeek: IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks ↗
• Ars Technica: Vulnerability that lets hackers SSH into Linux devices is under active exploitation ↗
• BleepingComputer: Hackers exploit SSHole OpenSSH flaw to breach Linux systems ↗