CISA Adds Four Known Exploited Vulnerabilities to Catalog
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Alerts (alerts-only)
Cyber ThreatOfficial statement
At a glance
- What
- Cyber Threat
- Who
- CISA Alerts (alerts-only)
- When
- Nov 9, 2026 at 12:00 PM UTC
Official Statements
CISA Alerts (alerts-only), November 9: “CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire FreeSwitch Code Injection Vulnerability CVE-2026-123158 OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability CVE-2026-123218 Ibm Aspera Faspex Incorrect Authorization Vulnerability These types of vulnerabilities are a frequent attack vector for malicious”
Source: CISA Alerts (alerts-only)
