CISA says IBM Faspex and FreeSWITCH flaws are exploited in attacks
Agencies must patch CVE-2026-123218 and CVE-2026-116779 within three days; GPUStack and SSHole are also listed as exploited.
1
Stories per day · 30 days
Relatedauthorization-bypass2cisa2freeswitch2gpustack2kev2code-injection1ibm1openssh1privilege-escalation1
3 stories, newest first · one card per story
Stories tagged #aspera-faspex
IBM Aspera Faspex flaw listed as exploited, grants full admin rights
CVE-2026-123218 affects Faspex 5.0.0 through 5.0.19; IBM’s fix is 5.0.19 PL1, with a claimed November 12 deadline.
CISA adds four exploited vulnerabilities to the KEV catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.