CISA warns attackers are actively exploiting OpenSSH bug and other high-risk flaws

The U.S. Cybersecurity and Infrastructure Security Agency has flagged four high-severity software vulnerabilities as being actively exploited by attackers. These flaws affect IBM's Aspera Faspex file transfer software, SignalWire's FreeSwitch telephony platform, the OpenSSH secure shell implementation on Linux systems, and GPUStack machine learning infrastructure. Each vulnerability carries a CVSS score of 8.1 or higher, with the worst rated 9.8 out of 10, indicating critical risk.

The IBM flaw allows authenticated attackers to bypass authorization controls, while the FreeSwitch bug enables code injection that could leak credentials and execute commands. Most notably, the OpenSSH vulnerability dubbed "SSHole" permits authentication bypass on Linux systems. Attackers have already launched at least 22 exploitation attempts from 14 unique IP addresses targeting this OpenSSH flaw. Systems administrators must immediately patch these vulnerabilities before attackers escalate their campaigns.

What to do: Patch IBM Aspera Faspex, SignalWire FreeSwitch, OpenBSD OpenSSH on Linux, and GPUStack to their respective fixed versions released in 2026.