CVE-2026-6730
published 2026-09-23CVE-2026-6730: IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.30%
21.9th percentile
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | concert | 1.0.0 – 3.0.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking.
ghsa_unreviewed·2026-09-23
CVE-2026-6730 [CRITICAL] CWE-120 IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking.
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
VulDB
IBM Concert up to 3.0.0 buffer overflow
vuldb·2026-09-23·CVSS 9.8
CVE-2026-6730 [CRITICAL] IBM Concert up to 3.0.0 buffer overflow
A vulnerability, which was classified as very critical, was found in IBM Concert up to 3.0.0. This vulnerability affects unknown code. The manipulation results in buffer overflow.
This vulnerability is identified as CVE-2026-6730. The attack is only possible with local access. There is not any exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-23
Published