CVEs published November 9 to November 15, 2026
520 CVEs were published Nov 9 to Nov 15, 2026, 29 of them critical. CISA added 4 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 520
- Critical
- 29
- Added to CISA KEV
- 4
- November 9, 2026520 CVEs · 29 critical
Added to CISA KEV 4
- CVE-2026-102895GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated…gpustack
- CVE-2026-116779FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandssignalwire freeswitch
- CVE-2026-123158sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass…OpenBSD OpenSSH
- CVE-2026-123218IBM Aspera Faspex Authorization BypassIBM Aspera Faspex