CVE-2026-8179

Published: May 27, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: psirt@us.ibm.com (Secondary)

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could allow an authenticated user to execute arbitrary code on the system.

Affected (6)

Products: Ibm: Aspera High Speed Transfer Endpoint, Aspera High Speed Transfer Server

Ibm

2 products

Aspera High Speed Transfer Endpoint

Aspera High Speed Transfer Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Aspera High Speed Transfer Endpoint	From 3.7.4 to 4.4.6
Ibm Aspera High Speed Transfer Endpoint	Version 4.4.7
Ibm Aspera High Speed Transfer Endpoint	Version 4.4.7 fixpack1
Ibm Aspera High Speed Transfer Server	From 3.7.4 to 4.4.6
Ibm Aspera High Speed Transfer Server	Version 4.4.7
Ibm Aspera High Speed Transfer Server	Version 4.4.7 fixpack1

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

https://www.ibm.com/support/pages/node/7273615

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.