CVE-2026-123218

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 9, 2026

Last Seen

November 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical IBM Aspera Faspex Vulnerability Actively Exploited79.5

CISA has warned of active exploitation of a critical vulnerability in IBM Aspera Faspex, tracked as CVE-2026-123218, which allows authenticated users to bypass authorization and gain full administrative privileges. This flaw, rated CVSS 9.8, affects all Faspex 5 versions from 5.0.0 to 5.0.19. IBM re...

CISA Adds Four Critical Vulnerabilities to KEV Catalog Amid Active Exploitation72.6

On November 9, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies until November 12 to remediate. The vulnerabilities include CVE-2026-102895 in GPUStack, CVE-2026-116779 in FreeSWITCH, CVE-2026-123158 in OpenSSH, an...