Vulnerability Details CVE-2026-8180
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.2%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-8180
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:3.9.3
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:3.9.6
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.0.0
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.3.1
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.3.2
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:4.4.7
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:3.9.3
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:3.9.6
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.0.0
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.3.1
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.3.2
-
cpe:2.3:a:ibm:aspera_high-speed_transfer_server:4.4.7