Skip to content
Threat Feed
Subscribe

Product

Concert (1.0 Through 3.0.1.1)

2 briefs RSS
critical advisory

IBM Concert: Remote command injection (CVE-2026-6715)

IBM Concert versions 1.0 through 3.0.1.1 are vulnerable to unauthenticated remote command injection due to improper input sanitization, allowing attackers to execute arbitrary commands with service privileges.

Concert vulnerability remote-code-execution web-application
2t 1c
critical advisory

IBM Concert: Arbitrary command execution (CVE-2026-15266)

IBM Concert versions 1.0 through 3.0.1.1 contain components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.

PoC Concert
1c