CISA added flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to its exploited-vulnerability catalog; attackers are separately reported to be targeting Barracuda email gateways.
CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog on November 9, citing evidence of active exploitation. The affected products are GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH and IBM Aspera Faspex—software used in AI infrastructure, communications, remote access and file transfers.
Small IT teams should first inventory these products, check whether they are internet-facing and apply the relevant vendor updates. Under Binding Operational Directive 26-04, federal agencies must remediate the four flaws within three days, by November 12. That deadline does not apply to private organizations, but confirmed exploitation makes prompt action prudent.
GPUStack’s CVE-2026-102895 is a CVSS 9.8 authentication bypass that can give an unauthenticated remote attacker full administrative access. SecurityWeek reported that the flaw had already been flagged as exploited at the end of July. Teams should check GPUStack versions, patch affected systems and restrict network access to administrative services. Strong passwords do not address a flaw that bypasses authentication.
OpenSSH’s CVE-2026-123158, called “SSHole,” can permit access to accounts on affected systems, including root. SecurityWeek reported exploitation began over the weekend, days after patches were released. Administrators should verify OpenSSH versions on affected Linux systems, install the applicable update and review authentication and system logs for unfamiliar access. Limiting SSH access to trusted networks can reduce exposure while patching, but is not a replacement for the update.
SignalWire’s October 28 advisory says exploitation of FreeSWITCH CVE-2026-116779 has been observed in the wild, but provides no attack details. SecurityWeek reported that the flaw involves SIP MESSAGE handling and can let an attacker select the API chat protocol and execute commands with the privileges of the FreeSWITCH process. SignalWire released FreeSWITCH 1.11.3. Operators should upgrade, limit access to exposed services and check for unexpected commands or changes.
IBM released Aspera Faspex 5.0.19 PL1 on Friday. IBM’s advisory did not mention exploitation, but CISA’s catalog addition cites active-exploitation evidence for CVE-2026-123218. SecurityWeek describes the flaw as an authorization bypass that can let an authenticated user obtain full administrative privileges through crafted messages. Faspex administrators should verify they are running the fixed release and review unusual account or administrative activity.
A separate warning concerns Barracuda Email Security Gateway appliances. BleepingComputer reported on November 10 that attackers were exploiting CVE-2026-116606 and CVE-2026-111560 to obtain root privileges. Barracuda’s November 2 advisory says exploitation requires access to an affected product’s administrative interface and recommends upgrading to the latest firmware. It lists ESG fixes BNSF-40425 for versions 9.4.017 and later, and BNSF-40430 for earlier versions. Barracuda recommends restricting administrative access to trusted internal networks.
The Barracuda vulnerabilities are not among the four entries in CISA’s November 9 KEV addition, which names GPUStack, FreeSWITCH, OpenSSH and Aspera Faspex. The Barracuda flaws also affect Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall and Web Security Gateway; administrators should check Barracuda’s advisory for applicable fixes.
For all affected systems, installing an update is only the first step. Teams should confirm remediation succeeded, preserve logs and investigate suspicious access or configuration changes. If a system was exposed or shows signs of compromise, review administrative accounts and credentials as well as the software version.
Ryan Mitchell serves as a Staff Writer for Just Right News, where he anchors the desk for Cyber, Technology Policy, and Digital Sovereignty. In an era where the digital landscape has become as much a battlefield as any physical territory, Ryan provides a critical conservative lens on the forces shaping the future of American innovation and national security. His work is defined by a commitment to the idea that American leadership in the digital age is not just a matter of economic success, but a necessity for the preservation of global liberty.
Born and raised in Austin, Texas, Ryan’s perspective is deeply rooted in the Lone Star State’s tradition of independence and skepticism of centralized authority. Growing up in a city that transformed from a quiet state capital into a global technology hub, he witnessed firsthand the disruptive power of the tech industry. This upbringing instilled in him a firm belief in free-market principles and the necessity of protecting individual liberties from both government overreach and corporate overstep. His Texan background serves as a foundational compass, guiding his reporting toward stories that emphasize national resilience and the preservation of constitutional values in an increasingly virtual world.
Now based in San Francisco, California, Ryan operates from the epicenter of the very industry he scrutinizes. Living and working in the heart of Silicon Valley allows him to provide “boots on the ground” reporting that few conservative journalists can match. He navigates the cultural and political complexities of the Bay Area to bring Just Right News readers an inside look at the boardrooms and coding labs where the next generation of digital policy is forged. For Ryan, being stationed in San Francisco is a strategic choice; it allows him to challenge the prevailing ideological monoculture of the tech elite from within their own backyard, ensuring that the concerns of middle America are represented in the conversation about our digital future.
His beat—Cyber, Technology Policy, and Digital Sovereignty—covers the high-stakes world of data privacy, artificial intelligence, and the infrastructure of the modern web. Ryan is particularly focused on the concept of digital sovereignty, arguing that for a nation to remain truly free, it must maintain control over its own technological destiny and critical infrastructure. He frequently explores how international regulations and domestic policies impact the ability of American firms to compete without sacrificing the privacy or security of their citizens.
Central to his current body of work is his featured series, “The New Cold War.” Through this project, Ryan examines the escalating technological rivalry between the United States and its global adversaries. He delves into the complexities of state-sponsored hacking, the global race for semiconductor dominance, and the ideological struggle to define the rules of the internet. Ryan views this competition not merely as a commercial race, but as a fundamental defense of Western values against authoritarian digital models. Through his rigorous reporting and principled analysis, Ryan Mitchell ensures that the readers of Just Right News stay informed about the invisible forces defining the 21st century, always advocating for a future where technology serves the cause of freedom.