Privilege Escalation in IBM Aspera Enterprise WebApps

CVE-2026-75782

What is CVE-2026-75782?

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected by a vulnerability that may enable a local attacker to gain elevated privileges. This issue arises due to a misconfigured PATH environment variable, which could allow unauthorized users to execute commands with higher permissions than intended. It is crucial for users and administrators of the affected software to apply the recommended patches and follow security best practices to mitigate potential risks.

References