CVE-2026-123218: IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an
IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.
- CISA KEV-listed (remediation due 2026-11-12)
- EPSS 0.5% (45.6% percentile)
- CVSS 9.8 critical