CVE-2026-7876criticalCWE-287

CVE-2026-7876: fallo crítico en IBM Aspera HSTS for CP4I

Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Aspera HSTS for CP4I

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.3%
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
IBM · Aspera HSTS for CP4I