Ibm Aspera High-speed Transfer Server For Cloud Pak For Integration vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Aspera High-speed Transfer Server For Cloud Pak For Integration: 1 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration

CVE-2026-7876 Critical · 9.1 CWE-287 May 27, 2026

Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.