CVE-2026-8175

Опубликовано: 27 мая 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

Ссылки

https://www.ibm.com/support/pages/node/7273615
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*

Версия от 3.7.4 (включая) до 4.4.6 (включая)

cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.4.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.4.7:fixpack1:*:*:*:*:*:*

cpe:2.3:a:ibm:aspera_high-speed_transfer_server:*:*:*:*:*:*:*:*

Версия от 3.7.4 (включая) до 4.4.6 (включая)

cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.4.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.4.7:fixpack1:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.0058

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122

Связанные уязвимости

GHSA-gwr3-hqj9-gxmf