CVE-2025-13481

HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-11

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Affected Platforms (CPE)

📦

Ibm

Aspera Orchestrator

>= 4.0.0 and < 4.1.1

References & Advisories

🔗 https://www.ibm.com/support/pages/node/7254434

相关漏洞威胁

CVE-2026-473939.8

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`pr...

CVE-2026-584847.1

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads eac...

CVE-2026-584825.9

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalInbox` (`li...

CVE-2026-584816.5

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped file access u...