[ CVE-2026-75621 · Published 12 Oct 2026 ]
Vulnerability in IBM Aspera Enterprise WebApps
CVSS 6.2
EPSS <1%No fix listed yet
[ Description ]Official description
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.