« Back to list

IBM

IBM Aspera: vulnerabilities and CVEs

IBM Aspera has 2 published vulnerabilities, 2 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical1
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-11980High (7.3)0.17%—Jul 30, 2026
IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.
CVE-2026-14973Critical (9.3)0.45%—Jul 28, 2026
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1203 Exploitation for Client Execution2
  2. T1059 Command and Scripting Interpreter1
  3. T1565.001 Stored Data Manipulation1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by IBM