CRITICAL/ NOVEMBER 10, 2026TODAY’S BRIEFING — #235
CISA KEV: OpenSSH auth bypass, IBM Aspera privilege escalation; Qubole AWS breach; N-able 30+ zero-days
CISA added four exploited vulnerabilities to KEV catalog including OpenSSH bypass (CVE-2026-123158) and IBM Aspera privilege escalation (CVE-2026-123218). Qubole customers' AWS accounts breached via platform credentials. N-able offline after 30+ zero-days disclosed.
CVE-2026-123158OpenBSD OpenSSH — sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to… · In CISA KEVCVE-2026-123218IBM Aspera Faspex — IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative… · In CISA KEVCVE-2026-116779SignalWire FreeSwitch — FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs… · In CISA KEVCVE-2026-102895Gpustack — GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. · In CISA KEV
Read the full briefing →