Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-8175

Multiple vulnerabilities in Aspera applications.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera High-Speed Transfer Endpoint

  • 3.7.4 to ≤ 4.4.7 Fix Pack 1affected

IBM Aspera High-Speed Transfer Server

  • 3.7.4 to ≤ 4.4.7 Fix Pack 1affected

References