CRITICAL SEVERITY
Critical CVEs (CVSS 9.0+)
Critical-rated vulnerabilities with active exploitation telemetry.
| CVE ID | Vendor & Product | Severity | Exploitation | Recommended Fix |
|---|---|---|---|---|
| CVE-2026-116606 2026-11-10 |
Barracuda Networks Barracuda Email Security Gateway (ESG) |
CRITICAL 9.3 | KEV EPSS 8.93% | Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securit |
| CVE-2026-102895 2026-11-09 |
GPUStack GPUStack |
CRITICAL 9.8 | KEV EPSS 0.52% | Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securit |
| CVE-2026-116779 2026-11-09 |
SignalWire FreeSwitch |
CRITICAL 9.8 | KEV EPSS 2.47% | Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securit |
| CVE-2026-123218 2026-11-09 |
IBM Aspera Faspex |
CRITICAL 9.8 | KEV EPSS 0.53% | Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securit |