Cyber Risks November 09, 2026 · CISA Advisories

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire FreeSwitch Code Injection Vulnerability CVE-2026-123158 OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability CVE-2026-123218 IBM Aspera Faspex Incorrect Authorization Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD)

Read the original at CISA Advisories ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-102895CVE-2026-116779CVE-2026-123158CVE-2026-123218

Related

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th) Cyber Risks · Nov 12, 2026

CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Nov 09, 2026

CVE-2026-116779: Signal Wire Free Switch Code Injection Vulnerability Known Exploited Vulnerabilities · Nov 09, 2026