Skip to content
Critical IBM Aspera Faspex Vulnerability Actively Exploited

Critical IBM Aspera Faspex Vulnerability Actively Exploited

First seen 10 Nov 2026, 07:40 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 14:15 UTC
  • •CVE-2026-123218 in IBM Aspera Faspex allows admin access via crafted messages.
  • •CISA added this vulnerability to its KEV catalog, confirming active exploitation.
  • •IBM released a critical patch (5.0.19 PL1) on November 7, 2026, for affected systems.

CISA has warned of active exploitation of a critical vulnerability in IBM Aspera Faspex, tracked as CVE-2026-123218, which allows authenticated users to bypass authorization and gain full administrative privileges. This flaw, rated CVSS 9.8, affects all Faspex 5 versions from 5.0.0 to 5.0.19. IBM released a patch, version 5.0.19 PL1, on November 7, 2026, urging immediate updates. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog on November 9, 2026, indicating evidence of exploitation in the wild. Additionally, the SignalWire FreeSwitch vulnerability, CVE-2026-116779, has also been confirmed as actively exploited, with a similar CVSS score of 9.8. Security professionals are advised to apply the patch promptly to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-04
CVE-2026-102895 published
CVE-2026-102895 disclosed, allowing unauthenticated admin access in GPUStack.
Thehackernews
2026-11-05
CVE-2026-116779 published
CVE-2026-116779 disclosed, a code injection vulnerability in SignalWire FreeSwitch.
Securityweek
2026-11-07
CVE-2026-123218 published
IBM disclosed CVE-2026-123218, an authorization bypass in Faspex.
Sploitus
2026-11-09
CISA adds vulnerabilities to KEV
CISA added CVE-2026-123218 and CVE-2026-116779 to its Known Exploited Vulnerabilities catalog.
Securityweek
2026-11-10
Public PoC for CVE-2026-123218
First public proof-of-concept for CVE-2026-123218 released, increasing urgency for patching.
Sploitus

More articles in this cluster (7)

Following this threat?

Track TAC Agent, CISA and CVE-2026-102895 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (19)

1 / 3

Common questions

Which versions of Faspex are affected?
All IBM Aspera Faspex versions from 5.0.0 to 5.0.19 are affected by CVE-2026-123218.
What should I do if I'm using Faspex?
Immediately update to version 5.0.19 PL1 to mitigate the risk of exploitation.
Is there evidence of exploitation?
Yes, CISA has confirmed active exploitation of the vulnerability in the wild.