CVE-2026-75777

Received Received - Intake

IBM Aspera Enterprise WebApps Container System Call Escape Vulnerability

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-75777

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aspera_enterprise_webapps	From 1.0.0 (inc) to 1.0.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 has a vulnerability where a local attacker can bypass container protections because the container allows unrestricted system calls.

Impact Analysis

This vulnerability could allow an attacker to escape container restrictions, potentially gaining unauthorized access to the host system or other containers, leading to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR or HIPAA, which mandate strict data protection and access controls.

Mitigation Strategies

Update IBM Aspera Enterprise WebApps to the latest version to ensure container protections are properly enforced and unrestricted system calls are blocked.

Hi! I’m here to help you understand CVE-2026-75777. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70