CVE-2026-6928: ibm concert

CVSS 9.8 (critical) · published 2026-09-23

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

Affected products (NVD): ibm concert

Weakness: CWE-416

Source: NVD CVE-2026-6928

References

• https://www.ibm.com/support/pages/node/7288830

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.