CVE-2026-8175

critical · 9.8

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

9.8

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2026-05-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-122

Affected products

Vendor	Product	Affected versions
ibm	aspera_high-speed_transfer_endpoint	>= 3.7.4, <= 4.4.6
ibm	aspera_high-speed_transfer_endpoint	4.4.7
ibm	aspera_high-speed_transfer_endpoint	4.4.7
ibm	aspera_high-speed_transfer_server	>= 3.7.4, <= 4.4.6
ibm	aspera_high-speed_transfer_server	4.4.7
ibm	aspera_high-speed_transfer_server	4.4.7

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7273615

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-8175