Sensitive Information Exposure in IBM Aspera Enterprise WebApps
CVE-2026-92832

5.1MEDIUM

Key Information:

Vendor

IBM
Status
Aspera Enterprise Webapps
Vendor
CVE Published:
12 October 2026

What is CVE-2026-92832?

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 may permit a local attacker to access sensitive information due to the unsafe transmission of data in cleartext. This vulnerability can lead to unauthorized disclosure of confidential data, highlighting the importance of securing data in transit to maintain the integrity and privacy of user information.

Affected Version(s)

Aspera Enterprise WebApps 1.0.0 <= 1.0.6

References

https://www.ibm.com/support/pages/node/7291755
vendor-advisorypatch

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.