CVE-2026-120115

Description

IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicious website could delete or inspect account configurations.

References

https://www.ibm.com/support/pages/node/7295714

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119679

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS