CVE-2026-75076
MediumCVSS 4.3Summary
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
Risk Assessment
The risk includes disclosure of application source code, which may help an attacker find other vulnerabilities or bypass security controls.
Recommendation
Upgrade IBM Aspera Enterprise WebApps to the latest version and remove or secure source map files in production.
Other vulnerabilities in IBM Aspera Enterprise WebApps
See all- CVE-2026-92832Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
- CVE-2026-75782High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
- CVE-2026-75621Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
- CVE-2026-75095High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-75777High
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.
Original NVD description (English source)
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS