Briefing · Tuesday 10 November 2026 · 07:00 UTC
Tuesday 10 November: 79 reports by 14 outlets
By CyberSIXT Briefing · Editorial policy
CISA KEV additions and the most covered stories in the 24 hours to 07:00 UTC.
Added to CISA KEV4
- In CISA KEVGPUStack Improper Authentication VulnerabilityCVE-2026-102895 · Federal deadline 12 November
- In CISA KEVSignalWire FreeSwitch Code Injection VulnerabilityCVE-2026-116779 · Federal deadline 12 November
- In CISA KEVOpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCVE-2026-123158 · Federal deadline 12 November
- In CISA KEVIBM Aspera Faspex Incorrect Authorization VulnerabilityCVE-2026-123218 · Federal deadline 12 November
Most covered10
- CISA adds OpenSSH authentication bypass flaw to exploited vulnerabilities list4 outlets
- NEAR AI breach used SGLang flaw to reach confidential AI requests1 outlet
- Researcher publishes Windows Search exploit for CVE-2026-506791 outlet · CVE-2026-50679
- CISA adds actively exploited IBM Aspera Faspex flaw to KEV catalog1 outlet
- Sharefull breach may expose 7.5 million gig workers' bank details1 outlet
- CISA adds four flaws exploited in the wild to its KEV catalog1 outlet
- CISA adds exploited FreeSwitch code injection flaw to KEV catalogue1 outlet
- CISA adds GPUStack authentication flaw allowing admin access to KEV1 outlet
- Apache fixes two Commons Codec flaws in version 1.23.01 outlet
- Attackers exploit Barracuda ESG flaws after PoC release1 outlet