CriticalVulnerabilityNov 10, 2026

CISA adds IBM Aspera Faspex to KEV

CISA added CVE-2026-123218 and CVE-2026-116779 affecting IBM Aspera Faspex and SignalWire FreeSwitch to its Known Exploited Vulnerabilities catalog. Both vulnerabilities are exploited in active attacks. Federal agencies must patch within three days. Prioritize patching if you deploy these products in internet-facing environments.

Vulnerabilities

CVE-2026-123218 CVSS 9.8 EPSS 0.7% Exploited (CISA KEV)
CVE-2026-116779 CVSS 9.8 EPSS 2% Exploited (CISA KEV)

Source

SecurityWeekRead the original article

AI-written summary. Check the original reporting before acting.