CVE-2026-8180

Published: May 27, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.

Affected (6)

Products: Ibm: Aspera High Speed Transfer Endpoint, Aspera High Speed Transfer Server

Ibm

2 products

Aspera High Speed Transfer Endpoint

Aspera High Speed Transfer Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Aspera High Speed Transfer Endpoint	From 3.7.4 to 4.4.6
Ibm Aspera High Speed Transfer Endpoint	Version 4.4.7
Ibm Aspera High Speed Transfer Endpoint	Version 4.4.7 fixpack1
Ibm Aspera High Speed Transfer Server	From 3.7.4 to 4.4.6
Ibm Aspera High Speed Transfer Server	Version 4.4.7
Ibm Aspera High Speed Transfer Server	Version 4.4.7 fixpack1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://www.ibm.com/support/pages/node/7273615

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.