A pair of high-severity vulnerabilities has been exploited in attacks, leaving organizations vulnerable to serious security breaches. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the exploitation of fresh IBM Aspera Faspex and SignalWire FreeSwitch flaws.
The first vulnerability affects IBM’s Aspera Faspex software, an authorization bypass that can be exploited via crafted messages. Successful exploitation could allow authenticated users to gain full administrative privileges. IBM patched this defect on Friday in Aspera Faspex version 5.0.19 PL1, urging customers to update their deployments as soon as possible.
The second vulnerability is a code injection issue affecting SignalWire FreeSwitch. The bug allows an attacker to inject malicious commands that can be executed with the privileges of the FreeSwitch process. This could lead to sensitive information disclosure, arbitrary call control, and command execution. SignalWire released version 1.11.3 with patches for this vulnerability.
According to CISA, both vulnerabilities have been added to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to patch them within three days as mandated by BOD 26-04. The agency also warned organizations of the in-the-wild exploitation of a critical authentication bypass in GPUStack and the recently patched SSHole flaw.
The SignalWire vulnerability is particularly concerning because it can be exploited via an inbound SIP MESSAGE, which allows a peer to deliver a message that controls the API command the server would run. This type of attack is often referred to as a “chat layer” vulnerability, where an attacker injects malicious code into the chat protocol selector.
It’s worth noting that both IBM and SignalWire have published advisories warning about the vulnerabilities and providing guidance on how to patch them. However, it appears that exploitation has been observed in the wild, with no details on the attacks made public.
CISA’s warning highlights the importance of keeping software up-to-date, especially when patches are available for critical vulnerabilities. Organizations should prioritize updating their systems as soon as possible to prevent potential security breaches. This includes not only patching the affected software but also reviewing and hardening related configurations to minimize attack surfaces.
Source: SecurityWeek — 2026-11-10