CVE-2026-6928: Multiple Vulnerabilities in IBM Concert Software
Published Sep 22, 2026
·Updated
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
Other sources
IBM Concert references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
— IBM
Affected Software
3 affected components
IBM Concert Software<=1.0.0-3.0.0
All of the following
IBM Concert>=1.0.0<=3.0.0
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concertto a version that resolves this vulnerability.Fixed in 3.0.1.1
Event History
Sep 22, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 23, 2026
CVE Published
via MITRE·08:54 PM
Data Sourced
via MITRE·08:54 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What capability does an attacker need to exploit this issue?
The attacker must be able to influence program execution or provide input to IBM Concert Software.