CVE-2026-14973

9.3 CRITICAL

Published: July 28, 2026 Modified: July 28, 2026

Description

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Patch Vendor Advisory Exploit Third Party Advisory

Source: psirt@us.ibm.com

1 reference(s) from NVD

CVSS v3 Score

9.3 / 10.0

Exploitation Status

Not in CISA KEV

CWE-22