CVE-2026-14958 — Critical vulnerability brief

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.

CVSS base score: 9.1 / 10