CVE-2026-75777 PUBLISHED

Multiple vulnerabilities in IBM Aspera Enterprise Webapps

Assigner: ibm
Reserved: 18.08.2026 Published: 10.09.2026 Updated: 10.09.2026

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.8

Attack Vector	Local	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	IBM
Product	Aspera Enterprise WebApps
Versions	affected from 1.0.0 to 1.0.5 (incl.)

Solutions

IBM strongly recommends addressing the vulnerabilities now by upgrading to IBM Aspera Enterprise WebApps 1.0.6 available from the link below

ProductFixing VRMPlatformLink to FixIBM Aspera Enterprise WebApps1.0.6

Linux Link https://www.ibm.com/support/fixcentral/swg/selectFixes

References

https://www.ibm.com/support/pages/node/7286738

Problem Types

CWE-269 Improper Privilege Management CWE