Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
ファイル転送製品IBM Asperaに3件の重大(Critical)な脆弱性。Aspera Faspex 5でコマンドインジェクションが2件(CVE-2026-14958, CVE-2026-14959)、Aspera Desktop Appで指定先以外へのファイルダウンロードが1件(CVE-2026-14973)。修正版提供済み。 https://securityonline.info/ibm-aspera-faspex-desktop-vulnerabilities/
Post summary
The post announces three critical vulnerabilities in IBM Aspera products, detailing their nature and CVE identifiers, and confirms that patches have already been released.
IBM Aspera vulnerabilities affect Faspex 5 and the Desktop App. CVE-2026-14973 and two RCE flaws rate up to 9.3. Update to Faspex 5.0.16 and Desktop 1.1.0. #IBMAspera #AsperaFaspex #CVE202614973 #RCE #PathTraversal #CyberSecurity http://securityonline.info/ibm-aspera-faspex-desktop-vulnerabilities/
Post summary
The post announces that IBM Aspera mitigates CVE‑2026‑14973 and two RCE flaws (rated up to 9.3) with updates to Faspex 5.0.16 and Desktop 1.1.0.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | ibm | aspera | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |