CVE-2026-6721: Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.
Other sources
IBM Concert allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concert Softwareto a version that resolves this vulnerability.Fixed in 3.0.1.1
Event History
Frequently Asked Questions
Which IBM offering should be prioritized for review?
The affected software is identified as IBM Concert Software.
What risk rating is assigned to this issue?
The reported risk rating is 85. No severity scale or scoring methodology is provided.
When was this issue published?
It was published on 2026-09-22 and was last modified on the same date.