CVE-2026-120115
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicious website could delete or inspect account configurations.