CVEvulnerability
CVE-2026-6928
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-23
- Last modified
- 2026-09-29
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
Affected configurations
• ibm concert (>= 1.0.0 <= 3.0.0)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.ibm.com/support/pages/node/7288830 Patch, Vendor Advisory