CVE-2025-36039: IBM Aspera Faspex

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,

Affected products

• IBM Aspera Faspex: from 5.0.0, up to and including 5.0.12.1

Published 2025-07-31. Last modified 2026-06-17.