CVE-2026-123218criticalunder attackCWE-863

CVE-2026-123218: critical vulnerability in IBM Aspera Faspex

IBM Aspera Faspex Authorization Bypass

Published · Updated

Follow this CVE+ Monitor Aspera Faspex

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

58Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 0.4%
from disclosure to weapon
Published on NVDNov 7
CISA KEV+2d
In short

A flaw in IBM Aspera Faspex lets a regular logged-in user bypass access controls and gain full administrator rights. Because it gives complete control of the file-transfer system, it is rated critical.

Technical detail

IBM Aspera Faspex 5.0.0 through 5.0.19 contains an authorization bypass (CWE-863) triggered by a specially crafted message sent by an authenticated user. Successful exploitation grants full administrative privileges, so the precondition is a valid low-privilege account. CVSS 9.8 reflects high impact to confidentiality, integrity, and availability with no user interaction required.

Summary generated and translated by AI from the official description.
IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · Aspera Faspex
Related CVEs — IBM Aspera Faspex

In the same product, most dangerous first.

CVE-2022-47986CRITICALIBM Aspera Faspex code executionEPSS 100.0%KEVCVE-2023-27874CRITICALIBM Aspera Faspex XML external entity injectionEPSS 1.3%CVE-2022-22497HIGHCVE-2022-22497EPSS 1.2%CVE-2023-30995HIGHIBM Aspera Faspex improper access controlEPSS 0.9%CVE-2023-27871HIGHIBM Aspera Faspex information disclosureEPSS 0.9%CVE-2023-27873MEDIUMIBM Aspera Faspex information disclosureEPSS 0.8%