CVE-2026-14996CWE-613
CVE-2026-14996
High · published July 29, 2026
What it is
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00335 · 25.7th percentile
- Weakness
- CWE-613 · Insufficient Session Expiration
- Published
- 2026-07-29T01:17Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| ibm/aspera_faspex | ≥ 5.0.0, < 5.0.16 | 5.0.16 |
References (1)
EPSS history
Timeline