PT-2026-97367

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description An unauthorized user can inject data into log messages because the software fails to properly neutralize special elements before writing them to log files. This issue is known as log...

PT-2026-97592

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description IBM Concert contains a use-after-free flaw, which occurs when a program continues to use a pointer after the memory it points to has been released. An attacker capable of influencing program...

CVE-2026-6327: Improper Output Neutralization for Logs

IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-6718: Incorrect Default Permissions

IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...

CVE-2026-6794: Double Free

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

PT-2026-97586

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Improper bounds checking leads to a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. A local user can exploit this to execute arbitrary co...

PT-2026-97590

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Incorrect memory management leads to a double free issue, which occurs when the program attempts to free the same memory location twice. A local attacker can exploit this to corrupt heap...

CVE-2026-6935: Uncontrolled Search Path Element

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...

CVE-2026-6928: Use After Free

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code...

CVE-2026-6730: Buffer Copy without Checking Size of Input

IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

PT-2026-97591

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description A remote attacker can perform directory traversal on the system by sending a specially crafted URL request containing dot-dot-slash /../ sequences. This allows the attacker to view arbitrary...

PT-2026-97577

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description Improper access control allows unauthorized modification of application files. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2026-6925: Improper Limitation of a Pathname to a Restricted Directory

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-3626: Generation of Error Message Containing Sensitive Information

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-6721: Improper Neutralization of Special Elements used in an OS Command

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the...

PT-2026-97578

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description An unauthenticated remote attacker can provide specially crafted input that is incorporated into OS commands, leading to arbitrary command execution on the underlying system. Successful...

PT-2026-97593

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description The software invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. This allows an attacker with local system access to...

CVE-2026-17465

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits...

CVE-2026-17472

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions...

CVE-2025-36084

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...