CISA Alerts Agencies to Actively Exploited Software Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding four actively exploited security flaws, adding them to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities affect GPUStack (CVE-2026-102895), SignalWire FreeSwitch (CVE-2026-116779), OpenBSD OpenSSH (CVE-2026-123158), and IBM Aspera Faspex (CVE-2026-123218). Federal Civilian Executive Branch agencies are mandated to apply necessary fixes by November 12, 2026, to mitigate potential risks.