CVE-2026-11980

HighCVSS 7.3

Published: 30/07/2026(UTC)Updated: 13/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

IBM Aspera Desktop App allows arbitrary code execution by loading DLL files at start-up.

Risk Assessment

An attacker can place a malicious DLL in the appropriate directory, leading to arbitrary code execution in the user's context when the application starts.

Recommendation

Upgrade IBM Aspera Desktop App to version 1.0.20 or later, which includes a fix. Also restrict permissions to application directories.

Other vulnerabilities in IBM Aspera Desktop App

CVE-2026-14973Critical
IBM Aspera Desktop App versions 1.0.5 through 1.0.19 allow files to be written outside of the user's selected download destination.

Original NVD description (English source)

IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.