CISA's New Warning: 4 Flaws Being Exploited Right Now

Robert Moore · 2026-11-10

So, CISA dropped some news on Monday that should make you sit up straight. They added four security flaws to their Known Exploited Vulnerabilities (KEV) catalog. And here's the kicker—these aren't just theoretical risks. There's evidence they're being actively exploited in the wild. If you're running any of the affected software, you'll want to pay attention. ### What Exactly Got Flagged? The four flaws affect GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, and IBM Aspera Faspex. That's a mix of networking, AI infrastructure, and file transfer tools. Not exactly niche stuff. CISA didn't mince words. They cited "evidence of active exploitation" for each one. That means attackers are already using these vulnerabilities to break into systems. And once they're in, who knows what they'll do. ### The One We Know Most About The details are still coming in, but one vulnerability stands out: CVE-2026-123218. It's an incorrect authorization flaw with a CVSS score of 9.8. That's about as bad as it gets—critical severity. An attacker could potentially bypass authorization checks and gain access to things they shouldn't. No authentication required, no user interaction needed. Just a straight shot. > "When CISA adds something to the KEV catalog, it's not a drill. They're saying, 'This is being used against real targets right now.' Ignoring it is like leaving your front door wide open." ### Why This Matters for Your Security Posture If you're using any of these tools, you need to act. The KEV catalog isn't just a suggestion—it's a mandate for federal agencies to patch within a set timeframe. But even if you're not a federal agency, you should treat this with the same urgency. Here's what you can do: - Check if any of the affected software is running in your environment. - Apply patches or mitigations as soon as they're available. - Monitor for unusual activity that could indicate exploitation. - Review your authorization controls to make sure they're not misconfigured. ### The Bigger Picture This isn't the first time CISA has raised the alarm this year. And it won't be the last. Attackers are constantly scanning for unpatched systems. The KEV catalog is a useful tool to prioritize your patching efforts. But it's also a reminder that security is a moving target. So, take a few minutes today to check your systems. Update what you can. And keep an eye on CISA's advisories. Your future self will thank you.