NetSight
critical9.8

CVE-2026-8175

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera …

Impact

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

Affected products

VendorProductAffected versions
IbmAspera High-Speed Transfer Endpoint
from 3.7.4 through 4.4.6
Version 4.4.7
IbmAspera High-Speed Transfer Server
from 3.7.4 through 4.4.6
Version 4.4.7

Weakness classification

References