CriticalVulnerabilityActiveExploitedKEVPatch availableCVE-2026-123218· updated Nov 10
IBM Aspera Faspex 5 authorization flaw CVE-2026-123218 exploited and added to KEV, allows escalation to full admin
IBM published a bulletin on Nov 7 saying Aspera Faspex 5.