CVE-2026-6715: critical vulnerability in IBM Concert
Multiple Vulnerabilities in IBM Concert Software
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.9%
IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system with the privileges of the affected service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · ConcertRelated CVEs — IBM Concert
In the same product, most dangerous first.
CVE-2026-6721CRITICALMultiple Vulnerabilities in IBM Concert SoftwareEPSS 1.2%CVE-2026-15266CRITICALMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.9%CVE-2026-3627CRITICALMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.5%CVE-2026-17465MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.5%CVE-2025-12767MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.5%CVE-2026-6925MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.5%