CISA Known Exploited Vulnerabilities

CVE-2026-116779: SignalWire FreeSwitch Code Injection Vulnerability

Monday, 9 November

SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.

Summary from the publisher's feed.

Read at CISA Known Exploited Vulnerabilities All news

More in Exploited now

13 NovCVE-2026-114713: UnrealIRCd Improper Neutralization of Delimiters VulnerabilityCISA Known Exploited Vulnerabilities
13 NovCVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-125350: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities