CVE-2026-7876 PUBLISHED

Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

Assigner: ibm
Reserved: 05.05.2026 Published: 27.05.2026 Updated: 27.05.2026

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19

Product Status

Vendor IBM
Product Aspera HSTS for CP4I
Versions
  • affected from 1.5.1 to 1.5.19 (incl.)

Solutions

Product(s)VRMFRemediation/First FixIBM Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)1.5.20- Access your charts to get the latest version

Credits

  • The vulnerabilities were reported to IBM by Yannik Marchand. finder

References

Problem Types

  • CWE-287 Improper Authentication CWE