CSIRT Italia warns about a flaw in IBM Aspera Faspex
KROMSE explanation
IBM Aspera Faspex has a security flaw (CVE-2026-123218, CVSS 9.8). The official record says: IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.
Yes. It is on CISA's official list of flaws attackers are using now.
Anyone running IBM Aspera Faspex.
- Do it today: this flaw is being used in attacks.
- Install the maker's update for IBM Aspera Faspex as soon as it is out.
- Not sure if you use it? KROMSE can check your product for free.
