Skip to content
Sign in
9.8 Critical

CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software

Description

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
Concert 1.0 1.0 → 3.0.1.1 No fix stated

Other CVEs of Concert

The 64 CVEs of Concert →
CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software 9.8 Critical CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation 3.7 Low CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection 4.7 Medium CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out… 3.7 Low
Track this CVE