{"id":"CVE-2026-123218","published":"2026-11-07T04:17:28.900","lastModified":"2026-11-10T13:49:00.563","description":"IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":["ibm","linux"],"products":["aspera faspex","linux kernel"],"references":[{"url":"https://www.ibm.com/support/pages/node/7295921","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123218","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Aspera Faspex versions 5.0.0 through 5.0.19 contain an authorization bypass vulnerability (CWE-863) allowing an authorized user to escalate privileges to full administrative access by crafting a specific message. This violates the principle of least privilege and enables complete system compromise.","exploitability":"Exploitation requires valid authentication as a non-administrative user and knowledge of how to construct the specific malformed message; no public exploit exists, but the low attack complexity (AC:L) suggests it is feasible for skilled attackers.","blast_radius":"Successful exploitation grants full administrative control over Faspex, enabling data exfiltration, system modification, lateral movement, and potential compromise of integrated systems relying on Faspex for file transfer.","remediation":"Upgrade to IBM Aspera Faspex 5.0.20 or later, which contains the fix for this authorization bypass vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","privilege-escalation","web-app","ibm"],"model":"garnet-coder","analyzedAt":"2026-11-08T09:45:51.243Z"}}