CVE-2026-75782
HighCVSS 7.8Summary
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
Risk Assessment
A local attacker could gain elevated privileges, potentially leading to unauthorized access to the system and data.
Recommendation
Fix the PATH environment variable configuration and apply available security updates from IBM.
Other vulnerabilities in IBM Aspera Enterprise WebApps
See all- CVE-2026-92832Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
- CVE-2026-75621Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
- CVE-2026-75095High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-75076Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
- CVE-2026-75777High
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.
Original NVD description (English source)
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS