CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA reported additions to its Known Exploited Vulnerabilities (KEV) Catalog from October 29 through November 9, 2026. The entries include actively exploited vulnerabilities affecting GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, IBM Aspera Faspex, SonicWall SonicOS, Apple products, WordPress, Ivanti Connect Secure, GitLab, Cisco Secure Firewall/FTD, VMware ESXi, and the Linux kernel. Organizations should prioritize remediation, assess internet-exposed systems, and investigate potential compromise before patching, consistent with CISA guidance and BOD 26-04.