Aspera Faspex

Mentions · 7d6
Mentions · 30d6
All mentions6
First seenNov 9, 2026
Last mentioned6h ago

Timeline

6 articles · newest first

CISA adds GPUStack, FreeSWITCH, OpenSSH, and Faspex flaws to KEV

Three flaws have confirmed exploitation; GPUStack and FreeSWITCH score 9.8 and allow admin or code execution.

Security AffairsNov 10, 21:31 UTC · 6h agoExploit / PoCExploited4 sourcesCVE-2026-102895 CVE-2026-116779 CVE-2026-123158+1

IBM Aspera Faspex flaw listed as exploited, grants full admin rights

CVE-2026-123218 affects Faspex 5.0.0 through 5.0.19; IBM’s fix is 5.0.19 PL1, with a claimed November 12 deadline.

Cyber Security NewsNov 10, 13:49 UTC · 14h agoExploit / PoCExploited2 sourcesCVE-2026-123218

CISA says IBM Faspex and FreeSWITCH flaws are exploited in attacks

Agencies must patch CVE-2026-123218 and CVE-2026-116779 within three days; GPUStack and SSHole are also listed as exploited.

SecurityWeekupdated Nov 10, 21:31 UTC · 6h agofirst Nov 10, 09:42 UTC · 18h agoExploit / PoCExploited4 sourcesCVE-2026-123218 CVE-2026-116779 CVE-2026-102895+11

CISA adds exploited OpenSSH, GPUStack, FreeSWITCH, and IBM flaws to KEV

FCEB agencies must apply fixes by November 12; SSHole activity includes miners, metadata queries, and a Python C2 agent.

The Hacker Newsupdated Nov 10, 21:31 UTC · 6h agofirst Nov 10, 06:31 UTC · 21h agoExploit / PoCExploited4 sourcesCVE-2026-123218 CVE-2026-116779 CVE-2026-123158+1

CISA adds four exploited vulnerabilities to the KEV catalog

The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.

CISA AdvisoriesNov 9, 12:00 UTC · 1d agoExploit / PoCExploitedCVE-2026-102895 CVE-2026-116779 CVE-2026-123158+1

CISA adds IBM Aspera Faspex flaw to KEV (CVE-2026-123218)

An authenticated user can craft a message to bypass authorization and escalate privileges; action is due November 12.

CISA Known Exploited Vulnerabilitiesupdated Nov 10, 13:49 UTC · 14h agofirst Nov 9, 00:00 UTC · 2d agoExploit / PoCExploited2 sourcesCVE-2026-1232181

Related CVEs

by mentions

CVE-2026-123218<1%9.8
Authorization bypass to admin in IBM Aspera Faspex 5.0.x
published 3d agoIBM Aspera FaspexKEV
CVE-2026-1167792%9.8
Arbitrary command execution in FreeSWITCH sofia_presence_handle_sip_i_message()
published 5d agoFreeSWITCHKEVPoC ×2
CVE-2026-102895<1%9.8
Authentication bypass in GPUStack before 2.2.0
published 6d agoGPUStackKEVPoC
CVE-2026-12315817%8.1
Password bypass in OpenSSH before 10.6p2 on musl without PAM
published 5d agoOpenSSHKEVPoC ×15

Appears with

CISAorganization · 6
IBMvendor · 6
SignalWirevendor · 4
FreeSWITCHproduct · 4
OpenSSHproduct · 3
OpenBSDvendor · 3
GPUStackproduct · 3
TAC Agentmalware · 1
GreyNoiseorganization · 1
GPUStackvendor · 1
Defused Cyberorganization · 1
watchTowrorganization · 1
Ulex Innovative Systemsorganization · 1
Previdianorganization · 1

Entities are extracted by the model from each article. First seen Nov 9, 2026, last mentioned 6h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.