CVE-2026-123218 Ibm Aspera Faspex
IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.
- CVSS
- 9.8 Critical
- EPSS
- 0.5%
- Percentile
- 46
- Published
- 2026-11-07
- Force
- 10 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
IBM Aspera Faspex Incorrect Authorization Vulnerability
- Added
- 2026-11-09
- Federal patch deadline
- 2026-11-12
- Ransomware use
- not known