CVE-2026-14958

IBM Aspera Faspex versions 5.0.0 through 5.0.15.4 are vulnerable to a critical remote code execution flaw caused by unquoted shell interpolation, allowing authenticated attackers to execute arbitrary code on the affected systems. Organizations using these versions should prioritize patching to mitigate the risk of exploitation, as the severity of this vulnerability could lead to significant data breaches or system compromise. Immediate action is recommended for environments where Faspex is deployed.