CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

The US Cybersecurity and Infrastructure Security Agency has added four security flaws to its list of known exploited vulnerabilities, indicating that these issues are being actively exploited. The affected products include GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, and IBM Aspera Faspex. One of the vulnerabilities, identified as CVE-2026-123218, is an incorrect authorization issue with a high CVSS score of 9.8. This suggests that the vulnerability can be easily exploited and could have significant consequences. The addition to the KEV catalog is based on evidence of active exploitation of these flaws. The vulnerabilities pose a significant risk due to their active exploitation.