CISA adds GPUStack, FreeSWITCH, OpenSSH, and Faspex flaws to KEV
Three flaws have confirmed exploitation; GPUStack and FreeSWITCH score 9.8 and allow admin or code execution.
82
Vendor
OpenBSD
- Mentions · 7d6
- Mentions · 30d13
- All mentions18
- First seenSep 16, 2026
- Last mentioned23h ago
Timeline
18 articles · newest firstCISA adds exploited OpenSSH, GPUStack, FreeSWITCH, and IBM flaws to KEV
FCEB agencies must apply fixes by November 12; SSHole activity includes miners, metadata queries, and a Python C2 agent.
82
CISA adds four exploited vulnerabilities to the KEV catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.
82
CISA lists OpenSSH auth bypass in KEV catalog (CVE-2026-123158)
Federal agencies must apply vendor mitigations or stop using the product by November 12, 2026.
80
OpenBSD top adds flag for chroot pledge unveil status
The top utility now uses a -Q flag to display each process's pledge chroot and unveil usage for quick security posture assessment.
30
OpenBSD security advisory for OpenSSH prior to 10.6p2
OpenSSH before version 10.6p2 is affected; Canadian Centre for Cyber Security encourages users to review release notes and apply updates.
25
OpenBSD 8.0 adds hardening and experimental post-quantum SSH
The October 20 release ships OpenSSH 10.6 and LibreSSL 4.4.0, including an OCSP authorization-bypass fix and kernel memory fixes.
52
OpenBSD 8.0 adds firewall hardening and vulnerability fixes
Errata also cover a remotely triggerable IPsec AES-GMAC kernel heap overflow on specific hardware; AES-GCM is unaffected.
58
OpenBSD 7.9 local root exploit chains old BSD bug with kernel flaw
Calif’s public chain bypasses KARL, SMAP, and SMEP; OpenBSD patched both issues in September via syspatch.
68
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
Researchers published a local OpenBSD kernel exploit chaining a decades-old shared-memory bug with an out-of-bounds write to gain root.
62
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Researchers published a local OpenBSD 7.9 root exploit chaining a 1988 shared-memory bug with a kernel use-after-free.
61
37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
Researchers released a patched OpenBSD local root exploit chaining a 37-year-old shared-memory bug.
62
VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
64
OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
OpenSSH 10.6 disables risky compression, blocks shell-injecting usernames, and enables a post-quantum signature.
66
Announce: OpenSSH 10.6 released
OpenSSH 10.6 is released as the project reports a surge of AI-assisted security bug reports.
32
A Recycled File Descriptor: CVE-2026-103547 in OpenBSD's ldapd
OpenBSD ldapd CVE-2026-103547 let a remote client inherit another connection's LDAP Bind via a recycled file descriptor.
61
Software sandboxing: The basics (2025)
A technical write-up presents composable seccomp-BPF syscall allowlist policies for sandboxing unprivileged Linux applications, inspired by Docker, systemd, and OpenBSD pledge.
30
From Report to Patch, the OpenBSD Errata Process
A talk walks through the OpenBSD errata process, tracing how vulnerability reports become coordinated, tested, and published security patches.
28
Related CVEs
by mentions- CVE-2026-12315817%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
- CVE-2026-1167792%9.8Arbitrary command execution in FreeSWITCH sofia_presence_handle_sip_i_message()
- CVE-2026-102895<1%9.8Authentication bypass in GPUStack before 2.2.0
- CVE-2026-123218<1%9.8Authorization bypass to admin in IBM Aspera Faspex 5.0.x
- CVE-2026-76641<1%8.7Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity…
- CVE-2026-76957<1%7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks
- CVE-2026-3547<1%7.5Out-of-bounds read in ALPN parsing due to incomplete validation
- CVE-2026-3833<1%7.4gnutls: This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
- CVE-2026-31912<1%5.5Out-of-bounds read in libpcap BPF interpreter can crash packet-capture processes
- CVE-2026-34073<1%1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Appears with
- OpenSSHproduct · 8
- Califorganization · 4
- CISAorganization · 4
- IBMvendor · 3
- OpenBSDproduct · 3
- FreeSWITCHproduct · 3
- SignalWirevendor · 3
- Aspera Faspexproduct · 3
- OpenBSDorganization · 2
- OpenSSHorganization · 2
- LibreSSLproduct · 2
- GPUStackproduct · 2
- httpdproduct · 1
- NSSproduct · 1
- AWSorganization · 1
- GnuTLSproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.