CVE-2026-8175
Published: 27 May 2026
Summary
CVE-2026-8175 is a critical-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Ibm Aspera High-Speed Transfer Endpoint. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 43.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-32496
Vulnerability details
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This…
more
vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in network-facing asperahttpd service directly enables remote exploitation for RCE/auth bypass on public-facing transfer server.
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.