CVE-2026-14973

CRITICAL

IBM Aspera Desktop App 1.0.5-1.0.19 - Path Traversal

Title source: manual
STIX 2.1

Description

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7280939

Scores

CVSS v3 9.3
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Details

CWE
CWE-22
Status published
Products (1)
IBM/Aspera Desktop App 1.0.5 - 1.0.19
Published Jul 28, 2026
Tracked Since Jul 29, 2026