CVE-2026-6794

HIGH

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/23/2026Modified: 9/28/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-6794 — IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due ...

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

CVE-2026-6794
NIST NVD

References (1)

https://www.ibm.com/support/pages/node/7288830Vendor Advisory