Good morning. N-able took hosted N-central offline and told on-premises customers to shut their servers down after exploit code for 33 flaws went public on Sunday. CISA also added four exploited bugs to its catalog on Monday, all due Thursday: FreeSWITCH, IBM Aspera Faspex, the OpenSSH SSHole bug we covered yesterday, and GPUStack.
Coffee first. Then one server to unplug, one phone switch to upgrade, one file server to patch and one key check.
Lead Story
N-able N-central: exploit code is public, the hotfix is not out, and N-able says to go offline. Keep on-prem N-central servers off the network until N-able’s status page says it is safe, and review admin accounts and script pushes since November 8.
Don’t Miss the Policy Changes That Affect Security Decisions
Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Also Worth Your Attention
FreeSWITCH: one SIP chat message can run commands on the switch. Upgrade to 1.11.3, or set enable-chat=false on profiles that do not need chat, before Thursday.
IBM Aspera Faspex 5: any signed-in user can become an admin. Install 5.0.19 PL1 and confirm the faspex-core image build.
SSHole on Alpine: attackers are in, and they plant SSH keys. Patch and restart sshd, then check authorized_keys on every Alpine host.
On the radar
- GPUStack before 2.2.0: CVE-2026-102895 treats requests from a same-host reverse proxy as the built-in admin. It is on the same Thursday KEV list. Upgrade to 2.2.0 and review admin API keys. GPUStack advisory.
- QNAP says Plex Media Server on some of its NAS devices was compromised through the Plex2Shell chain. Update Plex to 1.43.3 and stop forwarding port 32400. SecurityWeek.
- Microsoft’s November security updates are due today. Security Update Guide.
Slack paste
Today’s brief: (1) N-central: keep on-prem servers offline until N-able ships the hotfix; review admins and script pushes since Nov 8. (2) FreeSWITCH CVE-2026-116779: upgrade to 1.11.3 or enable-chat=false, KEV due Nov 12. (3) Aspera Faspex CVE-2026-123218: 5.0.19 PL1, KEV due Nov 12. (4) SSHole: patch, restart sshd, check authorized_keys.
Go Deeper
Identity and access: IAM library. Tools and checkers: cybersecurity tools. Reviewing logs after an incident like N-central’s? Our CySA+ exam guide covers the detection and response skills behind it.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
