CISA Adds Flaws in OpenSSH, GPUStack, FreeSWITCH and IBM Aspera Faspex to KEV Catalog Over Active Exploitation
Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four security flaws affecting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog on Monday, citing evidence of active exploitation. The Hacker News reports that one of the listed flaws, CVE-2026-123218, has a CVSS score of 9.8 and is an incorrect authorization vulnerability. The source excerpt is cut off, so the article's source text does not describe the other flaws or the affected versions.
Timeline
The Hacker News
Source ↗The Hacker News reports that CISA added four security flaws in GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH and IBM Aspera Faspex to its KEV catalog on Monday, citing evidence of active exploitation, and lists CVE-2026-123218 (CVSS 9.8), an incorrect authorization vulnerability.

Comments
No comments yet.
to like and comment.