---
title: US Authorities Warn of Four Exploited Vulnerabilities
url: https://www.dataloco.com/en/us-authorities-warn-of-four-exploited-vulnerabilities
published: 2026-11-13T14:20:49+00:00
language: en
section: Security
source: https://www.security-next.com/192603
organizations: cisa, ibm, aspera, faspex
publisher: Dataloco
---

# US Authorities Warn of Four Exploited Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding four vulnerabilities that have been confirmed to be exploited. On November 9, 2026, CISA added vulnerabilities related to "IBM Aspera Faspex," "FreeSWITCH," "OpenSSH," and "GPUStack" to the Exploited Vulnerabilities Catalog (KEV).

The file sharing software "IBM Aspera Faspex" is targeted by an authorization processing flaw identified as "CVE-2026-123218." While exploitation requires authentication, an attacker can bypass authorization through crafted messages and obtain administrative privileges.

In the communication infrastructure software "FreeSWITCH," the vulnerability "CVE-2026-116779" has been recorded. This allows for the execution of administrative API commands through SIP "MESSAGE" requests, potentially leading to the acquisition of configuration and authentication information, call control, and the execution of arbitrary OS commands.

Within the AI management platform "GPUStack," an attack against the vulnerability "CVE-2026-102895," which is caused by flaws in authorization processing, has been reported. Attackers can bypass authentication through specific reverse proxy configurations or HTTP header spoofing, granting them the ability to operate with administrative privileges or access confidential information and execute code.

## This story in other languages

- [中文](https://www.dataloco.com/zh/story-108)
- [Русский](https://www.dataloco.com/ru/vlasti-ssa-obratili-vnimanie-na-cetyre-uiazvimosti)
- [हिन्दी](https://www.dataloco.com/hi/amaraka-ejasa-na-cara-janiata-kamajaraya-para-catavana-tha)
- [Indonesia](https://www.dataloco.com/id/badan-siber-amerika-serikat-menambahkan-empat-kerentanan-yang-dieksploitasi-ke-dalam-katalog-resmi)
- [ไทย](https://www.dataloco.com/th/4)
- [Polski](https://www.dataloco.com/pl/amerykanski-cisa-ostrzega-przed-czterema-potwierdzonymi-lukami-w-zabezpieczeniach)
- [עברית](https://www.dataloco.com/he/story-138)
- [Deutsch](https://www.dataloco.com/de/cisa-warnt-vor-vier-bestatigten-sicherheitsanfalligkeiten)
- [Español](https://www.dataloco.com/es/cisa-advierte-sobre-cuatro-vulnerabilidades-confirmadas)
- [Français](https://www.dataloco.com/fr/alerte-sur-quatre-vulnerabilites-confirmees-aux-etats-unis)
- [Italiano](https://www.dataloco.com/it/avviso-su-vulnerabilita-di-sicurezza-da-parte-delle-autorita-statunitensi)
- [Nederlands](https://www.dataloco.com/nl/cisa-waarschuwt-voor-vier-kwetsbaarheden-waaronder-ibm-aspera-faspex)
- [Svenska](https://www.dataloco.com/sv/cisa-varnar-for-fyra-bekraftade-sarbarheter)
- [Norsk](https://www.dataloco.com/no/cisa-advarer-om-fire-sarbarheter-inkludert-ibm-aspera-faspex)
- [Türkçe](https://www.dataloco.com/tr/abd-kotuye-kullanimi-dogrulanan-4-guvenlik-acigina-dikkat-cekti)
- [العربية](https://www.dataloco.com/ar/alsltat-alamryky-ththr-mn-arbaa-thghrat-amny-mstghl)
- [Português (Brasil)](https://www.dataloco.com/pt-br/cisa-alerta-sobre-4-vulnerabilidades-confirmadas)