CVEvulnerability

CVE-2026-6721

9.8 CRITICAL Published 2026-09-23 Modified 2026-09-28 Official page ↗
Status
Analyzed
Published
2026-09-23
Last modified
2026-09-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.

Affected configurations

• ibm concert (>= 1.0.0 <= 3.0.0)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References