CRITICAL 9.1 NVD
CVE-2026-3627
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
References
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-08-28 via NVD.
Risk Timeline
CVE Disclosed2026-08-28 · 0 days ago
Remediation Resources
Analysis & PoC
www.ibm.com/support/pages/node/7285337
vulnfeed aggregates 11507 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.