CVE-2026-14973

—

CVSS 3.1

9.3 critical

EPSS

<1%p23

Published

Jul 28, 2026 (Jul 28, 2026)

Modified

Aug 13, 2026

Description

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Vendors: ibm
Products: aspera
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.