CVE-2026-14959 — Critical vulnerability brief

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.

CVSS base score: 9.1 / 10