[ CVE-2026-6928 · Published 23 Sep 2026 ]

Vulnerability in IBM Concert

CVSS 9.8 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.8

[ Description ]Official description

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

[ Fixes ]Fixes and patches

  • Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References