CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-6721 — IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can su...

·Source: NIST NVD

Updated:

Executive Summary

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application.

Analysis

IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code execution with the privileges of the affected application. CVSS Score: 9.8. Published: 2026-09-23T21:17:01.927.

Indicators of Compromise (1)

CVE (1)
CVE-2026-6721
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 23, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Signal adds encypted local backup support to iOS, desktop apps

Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows). [...]

BleepingComputer
LOWVulnerability

Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.

Dark Reading
MEDIUMVulnerability

US Air Force members given over 6 years in prison for cyber theft of more than $2 million

According to court documents, both men pleaded guilty to wire fraud, identity theft and access device fraud charges in June.

The Record