# IBM Aspera Faspex


- [CVE-2026-123218](https://insights.sbomify.com/CVE-2026-123218/): IBM Aspera Faspex Incorrect Authorization (critical 9.8, exploited in the wild)
- [CVE-2022-47986](https://insights.sbomify.com/CVE-2022-47986/): IBM Aspera Faspex Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-27874](https://insights.sbomify.com/CVE-2023-27874/): IBM Aspera Faspex XML external entity injection (critical 9.9)
- [CVE-2026-14958](https://insights.sbomify.com/CVE-2026-14958/): OS command injection in IBM Aspera Faspex (critical 9.1)
- [CVE-2026-14959](https://insights.sbomify.com/CVE-2026-14959/): OS Command Injection in IBM Aspera Faspex (critical 9.1)
- [CVE-2026-14996](https://insights.sbomify.com/CVE-2026-14996/): Multiple vulnerabilities in IBM Aspera Faspex (high 8.2)
- [CVE-2023-37400](https://insights.sbomify.com/CVE-2023-37400/): IBM Aspera Faspex privilege escalation (high 7.8)
- [CVE-2023-30995](https://insights.sbomify.com/CVE-2023-30995/): IBM Aspera Faspex improper access control (high 7.5)
- [CVE-2023-27871](https://insights.sbomify.com/CVE-2023-27871/): IBM Aspera Faspex information disclosure (high 7.5)
- [CVE-2023-27875](https://insights.sbomify.com/CVE-2023-27875/): IBM Aspera Faspex improper access controls (high 7.5)
- [CVE-2022-22497](https://insights.sbomify.com/CVE-2022-22497/): IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. (high 7.5)
- [CVE-2025-33136](https://insights.sbomify.com/CVE-2025-33136/): IBM Aspera Faspex data modification (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/aspera-faspex/