CVE Catalog
CVE-2026-14959
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk1.04%
61th percentile - higher than 61% of all known CVEs
Summary
IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 allow a remote authenticated attacker to execute arbitrary code via shell command injection.
Risk Assessment
An attacker can take control of the Faspex server, leading to full system compromise.
Recommendation
Update IBM Aspera Faspex 5 to version 5.0.15.5 or later.
Other vulnerabilities in IBM Aspera Faspex
See all- CVE-2026-14958Critical
IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 allow a remote authenticated attacker to execute arbitrary code via unquoted shell interpolation.
- CVE-2026-14996High
IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
Original NVD description (English source)
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.