CISA Adds 4 Exploited Flaws Including GPUStack and OpenSSH Vulnerabilities to KEV
Cybersecurity and privacy · Enterprise AI
On November 9, the U.S. CISA announced evidence of active exploitation for four vulnerabilities and added them to its Known Exploited Vulnerabilities (KEV) catalog. These include an authentication flaw in GPUStack, an OpenSSH authentication bypass (SSHole), a FreeSWITCH code injection flaw, and an authorization issue in IBM Aspera Faspex. Federal agencies must patch them by November 12.
According to iThome, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on November 9 that it has confirmed active exploitation of four vulnerabilities, adding them to its Known Exploited Vulnerabilities (KEV) catalog. The flaws include an improper authentication vulnerability in GPUStack (CVE-2026-102895), a code injection flaw in FreeSWITCH (CVE-2026-116779), an OpenSSH authentication bypass named SSHole (CVE-2026-123158), and an improper authorization flaw in IBM Aspera Faspex (CVE-2026-123218). CISA has mandated that federal agencies patch these vulnerabilities by November 12. The report notes that SSHole has the widest impact and saw exploitation activity within half a day of disclosure, while the remaining three flaws each carry a CVSS severity score of 9.8.
Key takeaways
- CISA added four actively exploited vulnerabilities to its KEV catalog on November 9, covering GPUStack, FreeSWITCH, OpenSSH, and IBM Aspera Faspex.
- Affected software includes GPUStack, an AI model serving platform, with an improper authentication flaw designated CVE-2026-102895.
- The OpenSSH vulnerability SSHole (CVE-2026-123158) faced exploitation within half a day of disclosure; the other three flaws hold CVSS scores of 9.8.
- U.S. federal agencies are required to remediate all four vulnerabilities by November 12.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.