What’s Vulnerable › Vulnerabilities
CVE-2026-6928: Multiple Vulnerabilities in IBM Concert Software
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-23 · updated 2026-09-29
- Weakness: CWE-416
Description
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
Affected products
- IBM Concert: from 1.0.0 through 3.0.0
References
Get alerted when CVE-2026-6928 or the next vulnerability affects your stack