Vulnerability in IBM Aspera HSTS for CP4I Affecting Multiple Versions
CVE-2026-7876

Currently unrated

Key Information:

Vendor

IBM
Status
Aspera Hsts For Cp4i
Vendor
CVE Published:
27 May 2026

What is CVE-2026-7876?

A significant security vulnerability has been identified in IBM Aspera HSTS for CP4I, affecting versions from 1.5.1 through 1.5.19. The vulnerability could potentially allow unauthorized access or manipulation of sensitive data, necessitating immediate attention from users of these specific versions. Users are strongly advised to apply the relevant patches as detailed in the vendor's advisory to safeguard their systems against potential threats.

Affected Version(s)

Aspera HSTS for CP4I 1.5.1 <= 1.5.19

References

https://www.ibm.com/support/pages/node/7274127
vendor-advisorypatch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The vulnerabilities were reported to IBM by Yannik Marchand.
.