CVE-2026-8180

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM Aspera High-Speed Transfer

Publication date: 2026-05-27

Last updated on: 2026-06-05

Assigner: IBM Corporation

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-05

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-8180

EUVD

EUVD-2026-32499

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aspera_high-speed_transfer_endpoint	From 3.7.4 (inc) to 4.4.6 (inc)
ibm	aspera_high-speed_transfer_endpoint	4.4.7
ibm	aspera_high-speed_transfer_endpoint	4.4.7
ibm	aspera_high-speed_transfer_server	From 3.7.4 (inc) to 4.4.6 (inc)
ibm	aspera_high-speed_transfer_server	4.4.7
ibm	aspera_high-speed_transfer_server	4.4.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Aspera High-Speed Transfer Endpoint and Server versions 3.7.4 through 4.4.7 Fix Pack 1. It is a potential denial of service issue in the asperahttpd component, where an unauthenticated user can cause the asperahttpd service to crash.

Impact Analysis

The impact of this vulnerability is a denial of service condition. An attacker who is not authenticated can cause the asperahttpd service to crash, potentially disrupting the availability of the IBM Aspera High-Speed Transfer service.

Mitigation Strategies

To mitigate the vulnerability in the asperahttpd component of IBM Aspera High-Speed Transfer Endpoint and Server versions 3.7.4 through 4.4.7 Fix Pack 1, you should upgrade both products to version 4.4.7 Fix Pack 2 or later where the issue is addressed.

Compliance Impact

The provided information does not specify how this denial of service vulnerability in IBM Aspera High-Speed Transfer Endpoint and Server affects compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-8180. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70