CRITICAL 9.8 NVD

CVE-2026-6721

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.

References

https://www.ibm.com/support/pages/node/7288830

Published: 2026-09-23 · Source: NVD · Feed updated: 2026-09-23

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-23 via NVD.

Risk Timeline

CVE Disclosed2026-09-23 · -1 days ago

Remediation Resources

Analysis & PoC

www.ibm.com/support/pages/node/7288830

vulnfeed aggregates 12908 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.