CVE-2026-14958 affects IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4. The vulnerability allows a remote authenticated attacker to execute arbitrary code on the affected system. The root cause is unquoted shell interpolation within the application. Successful exploitation requires the attacker to be authenticated. IBM has published a support advisory with remediation guidance. The issue is rated high severity given the potential for arbitrary code execution. Organizations using affected versions should apply the recommended patches or mitigations promptly.