The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about new vulnerabilities found in IBM Aspera Faspex and SignalWire FreeSwitch, which are currently being exploited by malicious entities. These vulnerabilities pose significant risks and have prompted urgent action from security organizations.
Details of the IBM Aspera Faspex Vulnerability
One of the critical vulnerabilities, identified as CVE-2026-123218, affects IBM Aspera Faspex, with a severity score of 9.8 out of 10. This flaw enables an unauthorized bypass through specially crafted messages, potentially allowing users to acquire full administrative access. IBM addressed this issue by releasing a patch in Aspera Faspex version 5.0.19 PL1 and strongly advises users to update their systems immediately.
SignalWire FreeSwitch Flaw Insights
Another serious vulnerability, CVE-2026-116779, targets SignalWire FreeSwitch. This code injection vulnerability can lead to unauthorized disclosure of sensitive information, arbitrary control over calls, and execution of commands. The flaw arises from how the system processes inbound SIP MESSAGEs, particularly when a plus sign is present. This design flaw allows unauthorized messages to dictate server commands.
With the release of SignalWire FreeSwitch version 1.11.3, patches have been made available to mitigate this vulnerability. CISA has urged federal agencies to apply these patches promptly, according to directives set by BOD 26-04.
Other Recent Security Concerns
In addition to these issues, CISA has highlighted the ongoing exploitation of a critical authentication bypass in GPUStack and the SSHole vulnerability affecting certain Linux distributions. The GPUStack flaw, CVE-2026-102895, could allow remote attackers to gain administrator-level access without authentication, while the SSHole vulnerability, CVE-2026-123158, poses a high risk of unauthorized root access.
The urgency to address these vulnerabilities is underscored by recent observations of exploitation in the wild. Despite limited public details on specific attack methods, the presence of these flaws in active exploitation scenarios necessitates immediate attention from security teams worldwide.
Keeping systems updated and applying available patches is crucial in safeguarding against these threats. Organizations are encouraged to stay informed on the latest advisories and implement recommended security measures to protect their infrastructure from potential attacks.
