CRITICAL 9.3 NVD

CVE-2026-14973

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

References

Published: 2026-07-28 · Source: NVD · Feed updated: 2026-08-04
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-07-28 via NVD.

Risk Timeline

CVE Disclosed2026-07-28 · 6 days ago

Remediation Resources

Analysis & PoC
www.ibm.com/support/pages/node/7280939
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.