Advisories · Technology

IBM Aspera Faspex 5.

Every CVE that names IBM Aspera Faspex 5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14958 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OS command injection in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Command injection
Not analysed yet 28 Jul 2026
CVE-2026-14959 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OS Command Injection in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Command injection
Not analysed yet 28 Jul 2026
CVE-2026-14996 CVE record

CVSS 8.2 High

Multiple vulnerabilities in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Authentication bypass
Not analysed yet 28 Jul 2026
CVE-2025-36226 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Cross-site scripting (XSS)
Not analysed yet 10 Mar 2026
CVE-2025-36227 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in IBM Aspera Faspex
- IBM Aspera Faspex 5
- CWE-644
Not analysed yet 10 Mar 2026
CVE-2025-36230 CVE record

CVSS 5.4 Medium

XSS in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Cross-site scripting (XSS)
Not analysed yet 26 Dec 2025
CVE-2025-36229 CVE record

CVSS 3.1 Low

Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex
- IBM Aspera Faspex 5
- Information disclosure
Not analysed yet 26 Dec 2025
CVE-2025-36228 CVE record

CVSS 3.8 Low

Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
- IBM Aspera Faspex 5
- CWE-279
Not analysed yet 26 Dec 2025