Skip to content
Threat Feed
Subscribe

Tag

Aspera

2 briefs RSS
critical advisory

IBM Aspera Desktop App Path Traversal Vulnerability (CVE-2026-14973)

The IBM Aspera Desktop App (versions 1.0.5 through 1.0.19) is affected by a path traversal vulnerability (CWE-22) which allows files to be written outside of the user's selected download destination, leading to high integrity and confidentiality impacts through arbitrary file write operations, and requires user interaction to exploit.

Aspera Desktop App +1 vulnerability path-traversal ibm aspera cve critical-vulnerability
1t 1c
high advisory

CVE-2026-8179 - IBM Aspera High-Speed Transfer Endpoint and Server Buffer Overflow

IBM Aspera High-Speed Transfer Endpoint and Server 3.7.4 through 4.4.7 Fix Pack 1 are vulnerable to a buffer overflow in the asperahttpd component, potentially allowing an authenticated user to execute arbitrary code.

Aspera High-Speed Transfer Endpoint +1 buffer-overflow rce ibm aspera
2r 1t 1c