Vulnerability Description
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aspera High-Speed Transfer Endpoint | >= 3.7.4, <= 4.4.6 |
| Ibm | Aspera High-Speed Transfer Server | >= 3.7.4, <= 4.4.6 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7273615Vendor Advisory
FAQ
What is CVE-2026-8180?
CVE-2026-8180 is a vulnerability with a CVSS score of 7.5 (HIGH). IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected...
How severe is CVE-2026-8180?
CVE-2026-8180 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-8180?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aspera High-Speed Transfer Endpoint, Ibm Aspera High-Speed Transfer Server.