CVE-2026-14959

Summary

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

Affected Software

VendorProductVersion RangeStatus
IBMAspera Faspex 55.0.0 <= 5.0.15.4affected

Weaknesses

  • CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References