IBM Aspera Vulnerabilities Patched in New Security Bulletin

IBM published an urgent security advisory for Aspera High-Speed Transfer Server and Endpoint products, disclosing multiple critical vulnerabilities (CVE-2026-7876, CVE-2026-9035, CVE-2026-8175, CVE-2026-8179, CVE-2026-8180) that include authentication bypass, path traversal, heap- and stack-based buffer overflows enabling remote code execution or denial of service, and a NULL pointer dereference; affected versions range from 3.7.4 through 4.4.7 Fix Pack 1 and IBM recommends upgrading to Fix Pack 2 immediately.