CVE-2026-8180: Multiple vulnerabilities in Aspera applications.
Published May 27, 2026
·Updated
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
Other sources
IBM Aspera High-Speed Transfer Server and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd service to crash.
— IBM
Affected Software
8 affected components
IBM Aspera High-Speed Transfer Endpoint<=3.7.4 - 4.4.7 Fix Pack 1
IBM Aspera High-Speed Transfer Server<=3.7.4 - 4.4.7 Fix Pack 1
IBM Aspera High-Speed Transfer Endpoint>=3.7.4<=4.4.6
IBM Aspera High-Speed Transfer Endpoint=4.4.7
IBM Aspera High-Speed Transfer Endpoint=4.4.7-fixpack1
IBM Aspera High-Speed Transfer Server>=3.7.4<=4.4.6
IBM Aspera High-Speed Transfer Server=4.4.7
IBM Aspera High-Speed Transfer Server=4.4.7-fixpack1
Remediation
Information
Product(s)VRMFRemediation/First FixIBM Aspera High-Speed Transfer Server4.4.7 Fix Pack 2Link to latest release (4.4.7 FP 2)IBM Aspera High-Speed Transfer Endpoint4.4.7 Fix Pack 2Link to latest release (4.4.7 FP 2)
Event History
May 27, 2026
CVE Published
via MITRE·01:20 PM
Data Sourced
via MITRE·01:20 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via IBM·02:15 PM
DescriptionAffected Software
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeaknessAffected Software