CVE-2026-8180 — Multiple vulnerabilities in Aspera applications.

CVE-2026-8180

Multiple vulnerabilities in Aspera applications. PUBLISHED

Description (CNA)

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera High-Speed Transfer Endpoint	affected 3.7.4 through 4.4.7 Fix Pack 1
IBM / Aspera High-Speed Transfer Server	affected 3.7.4 through 4.4.7 Fix Pack 1

CWE

CWE-476

References

https://www.ibm.com/support/pages/node/7273615

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.