CVE-2026-6928

9.8 criticalEPSS 0.5%

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2026-09-23
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

Affected

ibm:concert

References

https://www.ibm.com/support/pages/node/7288830

Check your stack JSON