{"revision":"7fd1a74872cb416185f8ff1b1570304c","evidence":{"cve":"CVE-2026-123218","kev":{"cve":"CVE-2026-123218","product":"Aspera Faspex","name":"IBM Aspera Faspex Incorrect Authorization Vulnerability","dateAdded":"2026-11-09","dueDate":"2026-11-12","knownRansomwareUse":false,"shortDescription":"IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.","vendor":"IBM","isMicrosoft":false,"products":[],"advisoryUrl":"https://www.ibm.com/support/pages/node/7295921","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123218","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-123218"},"epss":null,"observedAt":"2026-11-09T21:04:24.7578035+00:00","kevRetained":false,"reviewIdentity":"ca9fe8d3296d0370986daaa3"}}