CVE-2026-6928
published 2026-09-23CVE-2026-6928: IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.45%
38.1th percentile
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | concert | 1.0.0 – 3.0.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed.
ghsa_unreviewed·2026-09-23
CVE-2026-6928 [CRITICAL] CWE-416 IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed.
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
VulDB
IBM Concert up to 3.0.0 use after free
vuldb·2026-09-23·CVSS 9.8
CVE-2026-6928 [CRITICAL] IBM Concert up to 3.0.0 use after free
A vulnerability identified as very critical has been detected in IBM Concert up to 3.0.0. Affected is an unknown function. This manipulation causes use after free.
This vulnerability appears as CVE-2026-6928. The attack may be initiated remotely. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-23
Published