CVE-2026-123218

Published 9 November 2026 · tracked since 10 November 2026

Description

IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-124916 MEDIUM 5.4
• CVE-2026-124636 LOW 3.8
• CVE-2026-124635 MEDIUM 4.7
• CVE-2026-124625 MEDIUM 6.3
• CVE-2026-124624 MEDIUM 5.3
• CVE-2026-121843 HIGH 8.8
• CVE-2026-121842 HIGH 8.8
• CVE-2026-121841
• CVE-2026-119274 MEDIUM 4.8
• CVE-2026-124622 MEDIUM 5.3

→ Open the live CVE board · all tools