CISA adds four exploited security flaws to known vulnerabilities catalog

The Cybersecurity and Infrastructure Security Agency added four new security flaws to its Known Exploited Vulnerabilities catalog on November 9, 2026, CISA Alerts reported. The agency stated that the action is based on clear evidence of active exploitation in the wild. [1]

The newly added issues include CVE-2026-102895, an improper authentication vulnerability in GPUStack, CISA Alerts reported. The catalog updates also feature CVE-2026-116779, a code injection vulnerability affecting SignalWire FreeSWITCH, as well as an unexpected status issue in OpenBSD OpenSSH identified as CVE-2026-123158. [1]

Coverage from eSecurity Planet and CyberSecurityNews also detailed that CISA added a SonicWall SonicOS SSLVPN authentication bypass vulnerability to the catalog. The publications warned system administrators that the SonicWall flaw is being actively exploited in cyber attacks. [2][3][4]

CISA Alerts reported that these types of vulnerabilities serve as frequent attack vectors for malicious cyber actors and present major risks to federal networks. Under Binding Operational Directive 26-04, Federal Civilian Executive Branch agencies are required to prioritize security updates based on risk to address cataloged vulnerabilities. [1]