CVE-2026-149739.3CriticalCWE-22
IBM Aspera Desktop App vulnerability
IBM · Aspera Desktop App
Not in CISA KEVVendor fix available
0.5%probability of exploitation in the next 30 days
39th percentile
050100
Higher than 39% of scored CVEs
9.3CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 29 Jul.
- IBM patches critical Aspera flaws, including RCE bugSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.