# IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

Source: [SecurityWeek](https://www.securityweek.com/ibm-aspera-faspex-signalwire-freeswitch-vulnerabilities-exploited-in-attacks/) · 2026-11-10 · Security
Page: https://themorning.dev/story/ibm-aspera-faspex-signalwire-freeswitch-vulnerabilities-exploited-in-attacks-e61330c9778509bd
Kind: security · Impact: high

## In brief

- CISA added CVE-2026-123218 and CVE-2026-116779 to its Known Exploited Vulnerabilities (KEV) catalog.
- The flaws affect IBM Aspera Faspex and SignalWire FreeSWITCH and are reported as exploited in attacks.
- CISA urges federal agencies to patch them within three days.

## Why it matters

Both products are actively targeted, so developers and operators running either one should check versions and apply fixes promptly.

## What to do

- Check whether IBM Aspera Faspex or SignalWire FreeSWITCH is deployed in your environment.
- Apply the patches for CVE-2026-123218 and CVE-2026-116779.

## CVEs

- CVE-2026-123218
- CVE-2026-116779

## Coverage

- [IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks](https://www.securityweek.com/ibm-aspera-faspex-signalwire-freeswitch-vulnerabilities-exploited-in-attacks/) — SecurityWeek, 2026-11-10

Tags: security, vulnerability, kev, ibm-aspera, freeswitch, cisa

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev