Active Exploitation of IBM Aspera Faspex CVE-2022-47986

Rapid7 is aware of at least one incident where a customer was compromised via CVE-2022-47986. We strongly recommend patching on an emergency basis.

aspera aspera faspex aware compromised customer cve cve-2022-47986 emergency emergent threat response exploitation faspex ibm incident patching rapid7 vulnerability risk management