CVE-2026-14996
published 2026-07-28CVE-2026-14996: IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
PriorityP343high8.2CVSS 3.1
AVNACLPRNUINSUCHILAN
EPSS
0.34%
25.7th percentile
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | aspera_faspex | >= 5.0.0 < 5.0.16 | 5.0.16 |
| ibm | aspera_faspex_5 | 5.0.0 – 5.0.15.4 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
ghsa_unreviewed·2026-07-28
CVE-2026-14996 [HIGH] CWE-613 IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
VulDB
IBM Aspera Faspex up to 5.0.15.4 user session (EUVD-2026-50028)
vuldb·2026-07-28·CVSS 8.2
CVE-2026-14996 [HIGH] IBM Aspera Faspex up to 5.0.15.4 user session (EUVD-2026-50028)
A vulnerability was found in IBM Aspera Faspex up to 5.0.15.4. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to manage user sessions.
This vulnerability is traded as CVE-2026-14996. It is possible to initiate the attack remotely. There is no exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-28
Published