CVE-2026-6928

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-23

Last modified

2026-09-25

Weaknesses

CWE-416

Affected products

• Concert (Ibm)

References

• https://www.ibm.com/support/pages/node/7288830