VulnHub

Real-time Cybersecurity News

Critical

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

The Hacker News
Actively Exploited
CVEVulnerabilityCriticalIBM

Overview

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged four serious vulnerabilities that are currently being exploited in the wild. These flaws affect GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, and IBM Aspera Faspex. One of the most critical vulnerabilities, identified as CVE-2026-123218, has a CVSS score of 9.8, indicating a severe risk due to incorrect authorization. Organizations using these products should be particularly vigilant, as attackers are actively exploiting these weaknesses. It's crucial for users to address these vulnerabilities promptly to avoid potential breaches and data loss.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, IBM Aspera Faspex
  • Action Required: Organizations should immediately apply available patches for the affected software.
  • Timeline: Newly disclosed

Original Article Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-123218 (CVSS score: 9.8) - An incorrect authorization vulnerability

Impact

GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, IBM Aspera Faspex

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Organizations should immediately apply available patches for the affected software. Users should also review their authorization protocols and consider implementing additional security measures to mitigate risks while waiting for updates.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Vulnerability, Critical, and 1 more.

Read Original Article

Related Coverage

F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them

darkreading

F-Secure has identified 26 potential ways artificial intelligence can cause harm to consumers. Their new AI Harms Taxonomy outlines various risks, such as misleading information from chatbots and the dangers posed by compromised autonomous agents. The research emphasizes the need for defenses at different points in AI systems to mitigate these risks. By pinpointing where potential harms can occur, the study aims to help developers and companies implement better protective measures. This is crucial as AI technologies become more integrated into daily life, making it essential for users to understand the possible threats and for companies to prioritize security in their AI applications.

Nov 10, 2026

Microsoft releases Windows 10 KB5131096 extended security update

BleepingComputer

Microsoft has released the Windows 10 KB5131096 extended security update, which includes the latest security patches for November 2026. This update addresses several vulnerabilities that could potentially be exploited by attackers, along with various bug fixes and improvements. Users running Windows 10 should prioritize installing this update to ensure their systems are protected against any known threats. Keeping software up to date is crucial for maintaining security and preventing unauthorized access. The update is part of Microsoft's ongoing effort to provide support and security for its operating system.

Nov 10, 2026

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

The Hacker News

A vulnerability in Git, tracked as CVE-2026-111760, allows malicious repositories to execute arbitrary code on users' systems during recursive cloning. This issue arises from an integer truncation in how Git manages its index, particularly affecting the cloning of repositories along with their submodules. Git has addressed this flaw in version 2.56.1 and has also released fixes for earlier versions ranging from 2.50 to 2.55. Users who clone repositories recursively should update to the latest version to protect themselves from potential exploitation. This incident highlights the risks associated with open-source software, where malicious actors can exploit vulnerabilities to execute harmful code on unsuspecting users' machines.

Nov 10, 2026

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

The Hacker News

Last Sunday, an attacker exploited a remote code execution vulnerability in SGLang, an open-source inference engine, to gain unauthorized access to a NEAR AI inference server. This breach allowed the attacker to execute code and potentially view sensitive requests being processed on the server, including those made in a confidential mode designed to enhance privacy through a trusted execution environment. As a result, data from 18 agents and around 100 users was compromised. This incident raises serious concerns about the security of open-source software and the potential risks involved in handling sensitive data. Companies using SGLang or similar technologies need to assess their security measures to prevent future breaches.

Nov 10, 2026

AI Coding Agents Leak Thousands of Secrets to GitHub

darkreading

A serious security issue has emerged involving Claude Code, an AI coding tool that unintentionally saves files containing sensitive information, such as credentials, to public Git repositories. This oversight poses a significant risk for organizations using the tool, as it could expose their confidential data to anyone accessing these repositories. The incident raises concerns about the security practices surrounding AI tools in software development. Companies using Claude Code need to review their security measures and ensure that sensitive information is not being inadvertently published. This situation serves as a reminder of the vulnerabilities that can arise from integrating AI into coding workflows.

Nov 10, 2026

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

The Hacker News

Researchers at Check Point have identified three espionage campaigns linked by shared infrastructure and malware known as Sparrow. These campaigns have primarily targeted telecommunications companies, government bodies, military organizations, research institutions, and critical infrastructure across Latin America, Asia, and Europe over the past year. The clusters, named SilentDelivery, have been using similar malware code, indicating a coordinated effort from a group with ties to China. The implications of these attacks are serious, as they not only threaten sensitive data and national security but also highlight the ongoing risk to critical sectors worldwide. Organizations in these sectors should remain vigilant and enhance their security measures to protect against potential breaches.

Nov 10, 2026