Skip to content
OpenAdvisories
High · 7.5 CVE-2026-8180 EUVD-2026-32499GHSA-fqw5-w9px-94f7

Multiple vulnerabilities in Aspera applications.

Published May 27, 2026 · Updated May 28, 2026 · Assigned by ibm

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.

Affected products

VendorProductAffectedFixed
IBM Aspera High-Speed Transfer Endpoint 3.7.4 – ≤ 4.4.7 Fix Pack 1 —
IBM Aspera High-Speed Transfer Server 3.7.4 – ≤ 4.4.7 Fix Pack 1 —

Advisories 1

References