Vulnerabilities

TI-2026-12596 CVE-2026-14958 · GHSA-3rgm-cxfq-xh5v

OS command injection in IBM Aspera Faspex

MEDIUM 43

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00822 Published 2026-07-28 No fix listed CWE-78

TI-2026-12597 CVE-2026-14959 · GHSA-2h9v-wp82-7j69

MEDIUM 44

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01551 Published 2026-07-28 No fix listed CWE-78

TI-2026-12622 CVE-2026-14996 · GHSA-6cqr-77pm-8w5m

MEDIUM 42

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00335 Published 2026-07-28 No fix listed CWE-613