CVE-2026-14959

CRITICAL CVSS 9.1 View on NVD ↗

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Published: Jul 28, 2026 21:17 UTC Modified: Jul 29, 2026 14:16 UTC