CVE-2026-6718
published 2026-09-23CVE-2026-6718: IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
PriorityP428medium6.2CVSS 3.1
AVLACLPRNUINSUCNIHAN
EPSS
0.10%
0.9th percentile
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | concert | 1.0.0 – 3.0.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
ghsa_unreviewed·2026-09-23
CVE-2026-6718 [MEDIUM] CWE-276 IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
VulDB
IBM Concert up to 3.0.0 access control
vuldb·2026-09-23·CVSS 6.2
CVE-2026-6718 [MEDIUM] IBM Concert up to 3.0.0 access control
A vulnerability classified as problematic has been found in IBM Concert up to 3.0.0. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in improper access controls.
This vulnerability was named CVE-2026-6718. The attack needs to be approached locally. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-23
Published