Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

IBM patches critical Aspera flaws, including RCE bug

Part of the CVE-2026-14973 story · since 29 Jul

Quiet for 13 weekslast report 29 Jul1 article1 outlet
29 Jul · SecurityOnline first15 Sep1 Oct17 OctNowThis article1st of 1
  • Wed 29 Jul, 08:14 UTC. SecurityOnline, first report. IBM patches critical Aspera flaws, including RCE bug. This article, 1st of 1.

IBM has patched five vulnerabilities affecting Aspera Faspex 5 and the Aspera Desktop App, identified on July 20, 2026. Of these, four are CVEs with three rated as critical and one high, with the most severe flaw (CVE-2026-14973) having a CVSS score of 9.3, allowing for code execution. The vulnerabilities impact versions 5.0.0 to 5.0.15.4 for Faspex and 1.0.5 to 1.0.19 for the Desktop App.

Key issues include command execution via unquoted shell interpolation and path traversal flaws that can leak files outside designated folders. It is strongly advised to update both products immediately to mitigate potential risks.

How the story developed

All 1 articles
Quiet for 13 weekslast report 29 Jul1 article1 outlet

1 article from 1 outlet since 29 Jul. Quiet since 29 Jul. This was the first report.

Now29 Jul2930First reportSecurityOnline · 29 Jul, 08:14
  • Wed 29 Jul, 08:14 UTC. SecurityOnline, first report. IBM patches critical Aspera flaws, including RCE bug. This article, 1st of 1.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 1 articles as a list
  1. Wed 29 JulDay 01
    1. IBM patches critical Aspera flaws, including RCE bug08:14 · SecurityOnline · First report · This article, 1st of 1

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in