CVE-2026-14973

CriticalCVSS 9.3

Published: 28/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

IBM Aspera Desktop App versions 1.0.5 through 1.0.19 allow files to be written outside of the user's selected download destination.

A user may unintentionally save files to an unexpected location, potentially overwriting important system files or causing data leakage.

Update IBM Aspera Desktop App to the latest available version.

Original NVD description (English source)

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.