CVE-2026-14958

CriticalCVSS 9.1

Published: 28/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 allow a remote authenticated attacker to execute arbitrary code via unquoted shell interpolation.

An attacker can execute arbitrary commands on the server, leading to full compromise.

Update IBM Aspera Faspex 5 to version 5.0.15.5 or later.

Original NVD description (English source)

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.