CVE-2026-6930: IBM Concert Software Risky Cryptographic Algorithm

Q: Which IBM Concert versions are affected?

IBM Concert versions 1.0 through 3.0.0 are identified as using weaker than expected cryptographic algorithms.

Q: What would an attacker need to do to exploit this issue?

The issue is remotely reachable and requires no privileges or user interaction, but exploitation has high attack complexity. A successful attacker could decrypt highly sensitive information.

Q: What is the expected impact of successful exploitation?

The stated impact is limited to confidentiality: highly sensitive information could be decrypted. No integrity or availability impact is identified.

Published Oct 14, 2026

Updated

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Other sources

IBM Concert uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

— IBM

Affected Software

2 affected components

IBM Concert>=1.0<=3.0.0

IBM Concert Software<=1.0-3.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Concert Software to a version that resolves this vulnerability.
Fixed in 3.0.1.1

Event History

Oct 14, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 19, 2026

CVE Published

via MITRE·05:11 PM

Data Sourced

via MITRE·05:11 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7292374

Frequently Asked Questions

Which IBM Concert versions are affected?

IBM Concert versions 1.0 through 3.0.0 are identified as using weaker than expected cryptographic algorithms.

What would an attacker need to do to exploit this issue?

The issue is remotely reachable and requires no privileges or user interaction, but exploitation has high attack complexity. A successful attacker could decrypt highly sensitive information.

What is the expected impact of successful exploitation?

The stated impact is limited to confidentiality: highly sensitive information could be decrypted. No integrity or availability impact is identified.

CVE-2026-6930: IBM Concert Software Risky Cryptographic Algorithm

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which IBM Concert versions are affected?

What would an attacker need to do to exploit this issue?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which IBM Concert versions are affected?

What would an attacker need to do to exploit this issue?

What is the expected impact of successful exploitation?