Home › CVE Intelligence › CVE-2026-14958
CVSS 9.1 CRITICAL Vulnerability

CVE-2026-14958: CVE-2026-14958 - OS command injection in IBM Aspera Faspex

CVE ID : CVE-2026-14958 Published : July 28, 2026, 8:36 p.m. | 46minutes ago Description : IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted…

9.1CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-14958
VendorMultiple Vendors
Affected ProductMultiple Products
Vulnerability TypeVulnerability
CVSS Score9.1 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-14958

Published : July 28, 2026, 8:36 p.m. | 46minutes ago

Description : IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.

Severity: 9.1 | CRITICAL

Vi... [Full analysis available on Pro]

🎯 Known Indicators of Compromise

{"type":"ipv4","value":"5.0.15.4","confidence_score":0.88,"first_seen":"2026-07-29","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-14958 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence