CVE-2026-7876
Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration
CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
11th
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.
| CWE | CWE-287 |
| Vendor | ibm |
| Product | aspera hsts for cp4i |
| Published | May 27, 2026 |
| Last Updated | Jun 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm aspera hsts for cp4i
Be the first to know when new critical vulnerabilities affecting ibm aspera hsts for cp4i are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
IBM / Aspera HSTS for CP4I
1.5.1 ≤ 1.5.19
Credits
The vulnerabilities were reported to IBM by Yannik Marchand.