cyfenced.com →

[ CVE-2026-6721 · Published 23 Sep 2026 ]

Vulnerability in IBM Concert

CVSS 9.8 EPSS 1%No fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.8

[ Description ]Official description

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References