CVE-2026-123218

IBM Aspera Faspex Authorization Bypass

critical · 9.8

Known exploited

Fix listed

IBM Aspera Faspex

Published Nov 7, 2026, 03:47 UTC

Description

IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.

Reported fixed versions

5.0.19 PL1

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.