CVSS 3.7 (low) · published 2026-10-19
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.
Affected products (NVD): ibm concert
Weakness: CWE-942
Source: NVD CVE-2026-3303
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.