Cybersecsloth: CVE-2026-123218 defensive checks (IBM Aspera Faspex 5 incorrect authorization)
LAB-ONLY / DEFENSIVE USE. No exploit code, no payloads, no network connections from the
Python scripts. The shell script is read-only and only prints suggested firewall rules.

faspex-123218-version-check.py  flags inventory rows in 5.0.0-5.0.19 without Fix Pack 1.
faspex-admin-audit.py           flags unapproved admins and recent admin/account changes.
faspex-exposure-check.sh        lists faspex containers + listening web ports, prints an
                                optional nftables allowlist for you to review.

Fix: upgrade to IBM Aspera Faspex 5.0.19 PL1 and validate faspex-core is
5.0.19 (1ce4b13, Fix Pack: 1). IBM lists no workarounds (bulletin node/7295921, Nov 7, 2026).
CISA KEV: added 2026-11-09, due 2026-11-12, forensic triage: Yes, ransomware use: Unknown.
