Known Exploited Vulnerabilities November 09, 2026 · CISA KEV Catalog

CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-123218 IBM
Related: CISA Adds Four Known Exploited Vulnerabilities to Catalog Cyber Risks · Nov 09, 2026
CVE-2026-9198: IBM Langflow Code Injection Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026
CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability Known Exploited Vulnerabilities · Feb 21, 2023