Skip to content
OpenAdvisories
Medium NCSC-2026-0178 5 CVEs

Kwetsbaarheden verholpen in IBM Aspera High-Speed Transfer Endpoint en Server

Published Jun 8, 2026 · Updated Jun 8, 2026 · nl

Vendor: IBM Product: Aspera High-Speed Transfer Endpoint Product: Aspera High-Speed Transfer Server

Summary

IBM heeft kwetsbaarheden verholpen in IBM Aspera High-Speed Transfer Endpoint en Server versies 3.7.4 tot en met 4.4.7 Fix Pack 1.

Details

Interpretaties
De kwetsbaarheden bevinden zich in de asperahttpd component van de IBM Aspera High-Speed Transfer Endpoint en Server producten. Een buffer overflow kan leiden tot Denial-of-Service, omzeilen van authenticatie, of het uitvoeren van willekeurige code op afstand. Een niet-geauthenticeerde aanvaller kan de asperahttpd service laten crashen, wat resulteert in een serviceonderbreking. Daarnaast kan een geauthenticeerde gebruiker de normale autorisatiemechanismen omzeilen en lokaal opgeslagen bestanden op de server lezen zonder toestemming. Deze kwetsbaarheden zijn aanwezig in meerdere versies binnen het genoemde bereik.

Oplossingen
IBM heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-8175

    Multiple vulnerabilities in Aspera applications.

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vu…

    IBM Aspera High-Speed Transfer Endpoint Aspera High-Speed Transfer Server
  • Critical 9.1
    CVE-2026-7876

    Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

    IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when …

    IBM Aspera HSTS for CP4I
  • High 8.8
    CVE-2026-8179

    Multiple vulnerabilities in Aspera applications.

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vu…

    IBM Aspera High-Speed Transfer Endpoint Aspera High-Speed Transfer Server
  • High 7.5
    CVE-2026-8180

    Multiple vulnerabilities in Aspera applications.

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd compon…

    IBM Aspera High-Speed Transfer Server Aspera High-Speed Transfer Endpoint
  • Medium 6.5
    CVE-2026-9035

    Multiple vulnerabilities in Aspera applications.

    IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd comp…

    IBM Aspera High-Speed Transfer Server Aspera High-Speed Transfer Endpoint

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://www.ibm.com/support/pages/node/7273615