Search: CVE-2026-123218

IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.

Two critical vulnerabilities affecting IBM Aspera Faspex and SignalWire FreeSwitch have been exploited in attacks. CVE-2026-123218 is an authorization bypass in IBM Aspera Faspex allowing authenticated users to gain full administrative privileges. CVE-2026-116779 is a code injection vulnerability in SignalWire FreeSwitch that can lead to sensitive information disclosure, arbitrary call control, and command execution. Both vulnerabilities have high severity scores (9.8) and have been added to CISA's Known Exploited Vulnerabilities catalog with urgent patching guidance.