IBM patches critical Aspera flaws including severe CVEs

IBM has issued a security bulletin addressing multiple vulnerabilities in its Aspera software, crucial for high-speed file transfer systems. Key vulnerabilities include CVE-2026-7876, allowing authentication bypass with a CVSS score of 9.1, and CVE-2026-9035, which leads to unauthorized file access through path traversal. Severe memory corruption issues were identified, with CVE-2026-8175 (heap-based buffer overflow) scoring 9.8, leading to potential denial of service or remote code execution. Administrators are advised to upgrade software versions 3.7.4 to 4.4.7 to Fix Pack 2 to mitigate these risks.