CVE-2026-120113
6.4 MEDIUMPublished 2026-11-08 · Updated 2026-11-08
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading a victim to visit a malicious web page, an attacker could perform unauthorized cross-origin requests to read and modify configuration.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-306
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2022-29966PoC
- MEDIUMCVE-2024-5563
- UNSCOREDCVE-2025-30043
- UNSCOREDCVE-2025-30053
- CRITICALCVE-2025-70516
- UNSCOREDCVE-2026-0480
- MEDIUMCVE-2026-100192PoC
- UNSCOREDCVE-2026-100406PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.