9.1 CriticalCWE-287
CVE-2026-7876
IBM Aspera HSTS for CP4I vulnerability
IBMAspera HSTS for CP4I
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 24% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.
Coverage 1 article · 1 outlet
- IBM patches critical Aspera flaws including severe CVEsSecurityOnline · first in our coverage