Skip to main content
cve.nowby Sazabi
← Early warnings
SZB-4703b2a7b4Early warningVulnerabilityConfirmed

CISA adds four flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to KEV

CISA added four security flaws affecting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.

Written by a model from the sources below. Verify against them.

Sources9Confirmed
Kind
Vulnerability
Vendor
Multiple vendors (GPUStack, SignalWire, OpenBSD, IBM)
Product
Aspera Faspex
Status
Confirmed
First seen
Confirmed

Summary

CISA added four security flaws affecting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The listing names CVE-2026-123218, which CVSS scores at 9.8 and describes as an incorrect authorization vulnerability.

What to do

  • Identify whether GPUStack, FreeSWITCH, OpenSSH, or IBM Aspera Faspex is deployed in your environment

  • Apply vendor patches or mitigations for the listed flaws as soon as possible

  • Restrict network exposure of affected services until patched

  • Review logs for signs of exploitation of these services

  • Patch IBM Aspera Faspex to the vendor's fixed version now.

  • Check logs for signs of exploitation of both products.

Timeline

  1. Made public by Mastodon
  2. First seen by cve.now1 day
  3. Confirmed as CVE-2026-123218
  4. Record last updated

Evidence 9

  1. Social
    Mastodon
    “Exploitation of this path has been observed in the wild.”
  2. Social
    Bluesky
    “SignalWire FreeSwitch Code Injection Vulnerability”
    +1 more: Bluesky
  3. Social
    Mastodon
    “Newly listed by CISA: SignalWire FreeSwitch SignalWire FreeSwitch Code Injection Vulnerability”
    +5 more: Mastodon, Mastodon, Mastodon, Mastodon, Mastodon
  4. Social
    Mastodon
    “Prior to 1.11.2, FreeSWITCH's inbound ICE h”
    +3 more: Mastodon, Mastodon, Mastodon
  5. Social
    Mastodon
    “⚠️ FAILLE CRITIQUE CVE-2026-123218 activement exploitée : IBM Aspera Faspex – Autorisation incorrecte”
Show all 9 sourcesShow fewer sources
  1. Social
    Mastodon
    “CISA has added a flaw in IBM Aspera Faspex 5.0.0 through 5.0.19 to its exploited vulnerabilities list.”
    +1 more: Mastodon
  2. Social
    Mastodon
    “Do you run SignalWire FreeSwitch? CISA lists CVE-2026-116779 as exploited (added 9 Nov 2026).”
    +1 more: Mastodon
  3. Press
    The Hacker News
    “The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.”
  4. Press
    SecurityWeek
    “CISA has added CVE-2026-123218 and CVE-2026-116779 to KEV, urging federal agencies to patch them within three days.”

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

Questions about SZB-4703b2a7b4

Has Multiple vendors (GPUStack, SignalWire, OpenBSD, IBM) confirmed it?

Yes. Confirmed as CVE-2026-123218.Source: Mastodon, Bluesky, Mastodon, Mastodon, Mastodon, Mastodon, Mastodon, The Hacker News, SecurityWeek

What should Multiple vendors (GPUStack, SignalWire, OpenBSD, IBM) users do?

Identify whether GPUStack, FreeSWITCH, OpenSSH, or IBM Aspera Faspex is deployed in your environment. Apply vendor patches or mitigations for the listed flaws as soon as possible. Restrict network exposure of affected services until patched. Review logs for signs of exploitation of these services. Patch IBM Aspera Faspex to the vendor's fixed version now. Check logs for signs of exploitation of both products.

Does it have a CVE?

Yes. It is tracked as CVE-2026-123218 and CVE-2026-116779.Source: CVE-2026-123218, CVE-2026-116779

Sources

Tracked as