CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120113
MEDIUMCVSS 6.4NVD feed
Published 8 November 2026 · tracked since 9 November 2026
Description
IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading a victim to visit a malicious web page,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113364
- CVE-2026-113363
- CVE-2026-113362
- CVE-2026-124502 MEDIUM 4.3
- CVE-2026-124500 MEDIUM 6.3
- CVE-2026-124499 MEDIUM 4.7
- CVE-2026-18893 HIGH 7.1
- CVE-2026-18546 MEDIUM 5.4
- CVE-2026-116500 MEDIUM 6.2
- CVE-2026-116499 HIGH 8.4