Vulnerability intelligence

CVE-2026-7876

IBM Aspera HSTS for CP4I CWE-287

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.

CVSS Score

9.1

Critical

EPSS — Exploit Probability

0.3%

Riskier than 24% of all CVEs · checked 2026-09-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published