Security · High impactFan score 47 · Tier B
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
SecurityWeek · By Ionut Arghire ·
The Brief
- CISA added CVE-2026-123218 and CVE-2026-116779 to its Known Exploited Vulnerabilities (KEV) catalog.
- The flaws affect IBM Aspera Faspex and SignalWire FreeSWITCH and are reported as exploited in attacks.
- CISA urges federal agencies to patch them within three days.
Why it matters
Both products are actively targeted, so developers and operators running either one should check versions and apply fixes promptly.
Who’s affected
- Teams running IBM Aspera Faspex
- Teams running SignalWire FreeSWITCH
What to do
- Check whether IBM Aspera Faspex or SignalWire FreeSWITCH is deployed in your environment.
- Apply the patches for CVE-2026-123218 and CVE-2026-116779.
- CVE-2026-123218
- CVE-2026-116779
- #security
- #vulnerability
- #kev
- #ibm-aspera
- #freeswitch
- #cisa
CISA has added CVE-2026-123218 and CVE-2026-116779 to KEV, urging federal agencies to patch them within three days. The post IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks appeared first on SecurityWeek .