Cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aibmaspera_faspex/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 05:48:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM Aspera Faspex: Authorization bypass and privilege escalation (CVE-2026-123218)https://feed.craftedsignal.io/briefs/2026-11-ibm-aspera-faspex-auth-bypass/Sat, 07 Nov 2026 05:48:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-aspera-faspex-auth-bypass/IBM Aspera Faspex versions 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.<p>IBM Aspera Faspex versions 5.0.0 through 5.0.19 are vulnerable to an authorization bypass. An authorized user can craft a specific message to gain full administrative privileges. The vulnerability has a CVSS v3.1 Base Score of 9.8.</p> criticaladvisory