CVE-2026-75076
4.3MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-200
Impact
Adjacent attackers can read sensitive application source code and implementation details without authentication. They only need network access to the web server.
Root cause
The web application publicly exposes unminified JavaScript source map (.map) files.
Affected systems
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Fix & remediation
Upgrade to the latest patched release per IBM advisory node/7291755, or block external HTTP access to all *.map files in your reverse proxy or web server configuration.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.