IBM Aspera WebApps 1.0.0-1.0.6 Local Priv via Service Account Permissions
CVE-2026-75621 Published on October 12, 2026
IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
Vulnerability Analysis
CVE-2026-75621 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Execution with Unnecessary Privileges
The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Products Associated with CVE-2026-75621
Want to know whenever a new CVE is published for IBM Aspera Enterprise Webapps? stack.watch will email you.
Affected Versions
IBM Aspera Enterprise WebApps:- Version 1.0.0, <= 1.0.6 is affected.