AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-14973

IBM Aspera Desktop App: path traversal

IBM

CVE-2026-14973 · Published Jul 28, 2026 · updated Aug 13, 2026

Critical9.3
No fix yet
IBM advisory

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Affected versions

PackageAffectedFixed in
Aspera Desktop App
Product
>= 1.0.5, <= 1.0.19No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More IBM advisories

All IBM
High 7.5Jul 28IBM WebSphere Application Server: denial of serviceCVE-2026-14981no fix yetHigh 8.2Jul 28IBM Aspera Faspex 5: insufficient session expirationCVE-2026-14996no fix yetHigh 7.5Jul 28IBM WebSphere Application Server - Liberty: denial of serviceCVE-2026-15057no fix yetHigh 8.7Jul 28IBM WebSphere Application Server: request smugglingCVE-2026-15064no fix yetHigh 7.5Jul 28IBM WebSphere Application Server - Liberty: path traversalCVE-2026-15280no fix yetHigh 8.7Jul 28IBM WebSphere Application Server: request smugglingCVE-2026-15325no fix yet