CVE-2026-14959

CriticalCVSS 9.1

Published: 28/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

61th percentile - higher than 61% of all known CVEs

IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 allow a remote authenticated attacker to execute arbitrary code via shell command injection.

An attacker can take control of the Faspex server, leading to full system compromise.

Update IBM Aspera Faspex 5 to version 5.0.15.5 or later.

Original NVD description (English source)

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.