CVE-2026-75076: IBM Aspera Enterprise Webapps Information Disclosure

Q: Who can exploit this issue?

A remote attacker can exploit it without privileges or user interaction. The attack vector is adjacent network, so the exposed WebApps instance must be reachable from the attacker’s network position.

Q: Which releases are affected?

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected.

Q: What information could be exposed?

The disclosed material is JavaScript source map files, which could allow an attacker to obtain sensitive information. The available information does not specify the exact data that may be revealed.

Published Oct 8, 2026

Updated

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

Other sources

IBM Aspera Enterprise WebApps could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

— IBM

Affected Software

2 affected components

IBM Aspera Enterprise WebApps>=1.0.0<=1.0.6

IBM Aspera Enterprise WebApps<=1.0.0 - 1.0.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Aspera Enterprise WebApps to a version that resolves this vulnerability.
Fixed in 1.0.7

Event History

Oct 8, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 12, 2026

CVE Published

via MITRE·10:51 PM

Data Sourced

via MITRE·10:51 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7291755

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it without privileges or user interaction. The attack vector is adjacent network, so the exposed WebApps instance must be reachable from the attacker’s network position.

Which releases are affected?

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected.

What information could be exposed?

The disclosed material is JavaScript source map files, which could allow an attacker to obtain sensitive information. The available information does not specify the exact data that may be revealed.

CVE-2026-75076: IBM Aspera Enterprise Webapps Information Disclosure

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

Which releases are affected?

What information could be exposed?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which releases are affected?

What information could be exposed?