IBM Aspera Faspex: IBM Aspera Faspex Incorrect Authorization Vulnerability
- Level
- Minor (1/5)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Known Exploited Vulnerabilities
Cyber ThreatMinor (1/5)Official statement22nd Cyber threat alert in the last 30 days
At a glance
- What
- Cyber Threat
- Who
- CISA Known Exploited Vulnerabilities
- When
- Nov 9, 2026 at 12:00 AM UTC
- Pace
- 22nd Cyber threat alert at severity 1+ in the last 30 days
Official Statements
CISA Known Exploited Vulnerabilities, November 9: “IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.”
Source: CISA Known Exploited Vulnerabilities
