CISA adds four exploited vulnerabilities to the KEV catalog
Original title: CISA Adds Four Known Exploited Vulnerabilities to Catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.
CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. They are CVE-2026-102895 in GPUStack, CVE-2026-116779 in SignalWire FreeSWITCH, CVE-2026-123158 in OpenBSD OpenSSH, and CVE-2026-123218 in IBM Aspera Faspex. BOD 26-04 requires Federal Civilian Executive Branch agencies to rapidly remediate high-risk KEV flaws on publicly exposed assets that grant total control and to check for compromise before patching. No fixed versions are named.
- CVE-2026-102895 is an improper authentication flaw in GPUStack.
- CVE-2026-116779 is a code injection flaw in SignalWire FreeSWITCH.
- CVE-2026-123158 affects OpenBSD OpenSSH through an unexpected status or return value.
- CVE-2026-123218 is an incorrect authorization flaw in IBM Aspera Faspex.
- KEV nominations require a CVE ID, exploitation evidence, and mitigation guidance.
Impact: Authentication bypass, code injection, or incorrect authorization
| Product | Affected |
|---|---|
| GPUStack | — |
| SignalWire FreeSWITCH | — |
| OpenBSD OpenSSH | — |
| IBM Aspera Faspex | — |
- 1.Prioritize remediation of the four KEV entries on publicly exposed assets.
- 2.FCEB agencies should check whether systems were compromised before patching.
- Vendors
- SignalWireOpenBSDIBM
- Organizations
- CISA
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102895 | Authentication bypass in GPUStack before 2.2.0 | 9.8 | <1% | KEVPoC | KEV |
| CVE-2026-116779 | Arbitrary command execution in FreeSWITCH sofia_presence_handle_sip_i_message() | 9.8 | 2% | KEVPoC ×2 | KEV |
| CVE-2026-123158 | Password bypass in OpenSSH before 10.6p2 on musl without PAM | 8.1 | 17% | KEVPoC ×15 | KEV |
| CVE-2026-123218 | Authorization bypass to admin in IBM Aspera Faspex 5.0.x | 9.8 | <1% | KEV | KEV |
From the original article
1 min read at cisa.govCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.