CVE-2026-6935

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to command injection due to the software invoking operating system commands without fully qualifying executable paths or sufficiently restricting search path resolution. An attacker with local system access can manipulate the search path env...

CVE-2026-6935 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...

EUVD-2026-85670

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...