IBM Aspera Enterprise WebApps 1.0.0-1.0.6 PATH ENV Local Priv Esc
CVE-2026-75782 Published on October 12, 2026
IBM Aspera Enterprise Webapps Untrusted Search Path
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
Vulnerability Analysis
CVE-2026-75782 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an Untrusted Path Vulnerability?
The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
CVE-2026-75782 has been classified to as an Untrusted Path vulnerability or weakness.
Products Associated with CVE-2026-75782
Want to know whenever a new CVE is published for IBM Aspera Enterprise Webapps? stack.watch will email you.
Affected Versions
IBM Aspera Enterprise WebApps:- Version 1.0.0, <= 1.0.6 is affected.