CVE-2026-14973

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Score

CVSS 3.1 9.3 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-07-28

Last modified

2026-10-23

Weaknesses

CWE-22

Affected products

• Aspera (Ibm)
• Aspera Desktop App (Ibm)

References

• https://www.ibm.com/support/pages/node/7280939