aspera high-speed transfer server vulnerabilities and fixes

Recent CVEs affecting aspera high-speed transfer server, with upgrade or downgrade steps. 4 tracked.

Also searched as: aspera high speed transfer server, asperahigh-speedtransferserver.

aspera high-speed transfer server has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-27. Highest priority: CVE-2026-8175 (score 51/100).

• CVE-2026-9035 MEDIUM 6.5 UPGRADE UPGRADE IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Serv
• CVE-2026-8180 HIGH 7.5 UPGRADE UPGRADE IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Serv
• CVE-2026-8179 HIGH 8.8 UPGRADE UPGRADE IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Serv
• CVE-2026-8175 CRITICAL 9.8 UPGRADE UPGRADE IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Serv

FAQ

How do I fix aspera high-speed transfer server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is aspera high-speed transfer server being exploited right now?

None of the tracked aspera high-speed transfer server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which aspera high-speed transfer server CVE should I patch first?

CVE-2026-8175 currently ranks highest (51/100): IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Serv.

RSS feed for aspera high-speed transfer server · ← Back to latest CVEs