CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

# CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

https://gcdradar.vercel.app/incidents/cve-2026-123218-ibm-aspera-faspex-incorrect-authorization-vu · AIR-2026-1846 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Exploitation in the wild is confirmed via CISA KEV.
- Fix status: Partly patched
- First reported: 2026-11-09
- AI role: No AI role
- Products: IBM Aspera Faspex
- CVE ids: CVE-2026-123218
- CVSS: 9.8

## Summary

IBM Aspera Faspex contains an incorrect authorization flaw allowing authenticated users to craft specific messages and escalate privileges. CISA added the vulnerability to its KEV catalog following confirmation of active exploitation.

## What to do

Apply mitigations or updates in accordance with vendor instructions and CISA guidance.

## Latest updates

- 2026-11-09: CVE-2026-123218: IBM Aspera Faspex — IBM Aspera Faspex Incorrect Authorization Vulnerability (https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123218)

## Sources

- 2026-11-09 CISA: CVE-2026-123218: IBM Aspera Faspex — IBM Aspera Faspex Incorrect Authorization Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123218
- 2026-11-10 The Hacker News: CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html
- 2026-11-10 SecurityWeek: IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks https://securityweek.com/ibm-aspera-faspex-signalwire-freeswitch-vulnerabilities-exploited-in-attacks

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.