The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerabilities are listed below -


CVE-2026-123218 (CVSS score: 9.8) - An incorrect authorization vulnerability



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html