CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

CISA has added four actively exploited flaws to its Known Exploited Vulnerabilities catalog: CVE-2026-123218 in IBM Aspera Faspex, CVE-2026-116779 in SignalWire FreeSWITCH, CVE-2026-123158 (SSHole) in OpenBSD OpenSSH, and CVE-2026-102895 in GPUStack. Federal civilian agencies are required to apply the fixes by November 12, 2026, and exploitation attempts against the OpenSSH flaw have been recorded since November 6.