Field brief
CISA Adds Four New Vulnerabilities to KEV Catalog
CISA announced four new vulnerabilities added to its Known Exploited Vulnerabilities catalog on November 9, 2026, highlighting active exploitation of GPUStack, SignalWire, OpenBSD OpenSSH, and IBM Aspera products.
CISA added four new vulnerabilities to its KEV catalog on Nov 9, 2026, indicating active exploitation of GPUStack, SignalWire, OpenBSD OpenSSH, and IBM Aspera. These CVEs—CVE‑2026‑102895, CVE‑2026‑116779, CVE‑2026‑123158, CVE‑2026‑123218—represent improper authentication, code injection, unexpected status code, and incorrect authorization issues, respectively. The announcement urges organizations to patch or harden affected products immediately, aligning with BOD 26‑04’s risk‑based vulnerability management. For defenders, the update signals that these vulnerabilities are being actively exploited, so prioritizing their remediation can reduce exposure to potential breaches. Check your inventory for GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex, apply the latest patches, and verify that authentication controls are correctly configured. CISA KEV alert. See the full alert for details and patch notes. The catalog update also highlights the importance of continuous monitoring and rapid patch deployment to mitigate exploitation risks.
See what applies to your environment.
Use the Ncerio CVE feed to move from general intelligence to affected products.