CVE-2026-75777
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.
Risk Assessment
An attacker with local access could break out of the container and reach host resources. This may lead to privilege escalation and compromise of the entire system.
Recommendation
Update IBM Aspera Enterprise WebApps to a version later than 1.0.5 once a fix is released. Restrict container privileges and apply seccomp profiles that block dangerous system calls.
Other vulnerabilities in IBM Aspera Enterprise WebApps
See all- CVE-2026-92832Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
- CVE-2026-75782High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
- CVE-2026-75621Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
- CVE-2026-75095High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-75076Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
Original NVD description (English source)
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS