CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

CISA's addition of four vulnerabilities — including a critical 9.8-scored incorrect authorization flaw in CVE-2026-123218 — to its Known Exploited Vulnerabilities catalog confirms that threat actors are actively weaponizing unpatched systems in the wild. The affected products span widely-used infrastructure components including OpenSSH, GPUStack, FreeSWITCH, and IBM Aspera Faspex, meaning the attack surface is broad and varied. Organizations that lack disciplined patch cycles or asset inventories may not even know they are running vulnerable versions. This incident underscores that CISA KEV listings are a near-real-time signal that exploitation is occurring now, not theoretically — delayed remediation directly translates to elevated breach risk.