Critical · 9.3 CVE-2026-14973 EUVD-2026-50032GHSA-q92f-x3wf-xc2v

Path Traversal in IBM Desktop App

Published Jul 28, 2026 · Updated Jul 31, 2026 · Assigned by ibm

Description

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

Vendor	Product	Affected	Fixed
IBM	Aspera Desktop App	1.0.5 – ≤ 1.0.19	—