← back
CVE-2026-14973criticalCWE-22

Path Traversal in IBM Desktop App

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.5%
exploitation probability
0.5%top 63% of all CVEs
observed exploitation
nono source reports it
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Affected products
IBM · Aspera Desktop App