CVE-2026-8175
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - psirt@us.ibm.com
- Published
- 2026-05-27
- Last modified
- 2026-05-28
- Weaknesses
- CWE-122
Affected products
- Aspera High-speed Transfer Endpoint (Ibm)
- Aspera High-speed Transfer Server (Ibm)
- Aspera High Speed Transfer Endpoint (Ibm)
- Aspera High Speed Transfer Server (Ibm)
References
- https://www.ibm.com/support/pages/node/7273615