Description
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Aspera High-Speed Transfer Endpoint | 3.7.4 – ≤ 4.4.7 Fix Pack 1 | — |
| IBM | Aspera High-Speed Transfer Server | 3.7.4 – ≤ 4.4.7 Fix Pack 1 | — |
Advisories 1
- NCSC-2026-0178 Kwetsbaarheden verholpen in IBM Aspera High-Speed Transfer Endpoint en Server NCSC-NL (Netherlands) · Jun 8, 2026
References
- https://www.ibm.com/support/pages/node/7273615 vendor-advisory patch