cyfenced.com →

[ CVE-2026-6935 · Published 23 Sep 2026 ]

Vulnerability in IBM Concert

CVSS 7.8 EPSS <1%Fix available

[ Description ]Official description

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code.

[ Fixes ]Fixes and patches

  • Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References