CVE-2022-47986 CISA KEV · Actively exploitedLinked to ransomware
IBM Aspera Faspex Code Execution Vulnerability
CVSS score
—
EPSS probability
%100.0
Risk score
—
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)
Makefile Go / Python
Nuclei: IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-9198 Actively exploitedUnauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Patch verified Public Exploits:11EPSS %29
9.8
CVE-2025-13915Vulnerability in IBM API Connect
Patch status unknownEPSS %9
6.5
CVE-2013-3993 Actively exploitedPath traversal in N/a
WorkaroundEPSS %5
10.0
CVE-2026-13773Server-side request forgery in IBM Websphere Extreme Scale
Patch status unknownEPSS %6
9.9
CVE-2026-19295Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement
Patch verified Public Exploits:2EPSS %3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-47986"