Skip to content
CISA Adds Four Critical Vulnerabilities to KEV Catalog Amid Active Exploitation

CISA Adds Four Critical Vulnerabilities to KEV Catalog Amid Active Exploitation

First seen 10 Nov 2026, 14:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 14:15 UTC
  • •CISA added four critical vulnerabilities to the KEV catalog on November 9, 2026.
  • •Affected systems include GPUStack, FreeSWITCH, OpenSSH, and IBM Aspera Faspex.
  • •Exploitation of these vulnerabilities is confirmed, with a patch deadline set for November 12.

On November 9, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies until November 12 to remediate. The vulnerabilities include CVE-2026-102895 in GPUStack, CVE-2026-116779 in FreeSWITCH, CVE-2026-123158 in OpenSSH, and CVE-2026-123218 in IBM Aspera Faspex. These flaws allow attackers to bypass authentication, gain administrative access, or execute commands on affected systems. CISA has confirmed exploitation of all four vulnerabilities, although specific details about the attackers and the number of affected organizations remain undisclosed. Administrators are advised to prioritize patching vulnerable systems and check for unauthorized access, especially for any accounts or credentials that may persist post-patching.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-04
CVE-2026-102895 published
GPUStack vulnerability CVE-2026-102895 was published, allowing remote attackers to gain admin access.
Esecurityplanet

More articles in this cluster (8)

Following this threat?

Track CVE-2025-61624 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (31)

1 / 3

Common questions

What are the CVEs involved?
The vulnerabilities are CVE-2026-102895 (GPUStack), CVE-2026-116779 (FreeSWITCH), CVE-2026-123158 (OpenSSH), and CVE-2026-123218 (IBM Aspera Faspex).
What is the patch deadline?
Federal agencies must remediate the vulnerabilities by November 12, 2026.
How can I check if my systems are affected?
Administrators should verify their versions of GPUStack, FreeSWITCH, OpenSSH, and IBM Aspera Faspex against the CVEs listed.