by Kastro
Paper/Archive/CVE-2026-14973

CVE-2026-14973

IBM Aspera Desktop App — Path Traversal in IBM Desktop App

EPSS 0.5%CVSS 9.3
critical.is priorityof 100
36
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 39.3.393 × 207.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Affected

ProductAffectedFixed inSource
Aspera Desktop App1.0.5 – 1.0.19–CNA

Scores by source

ibm (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7280939