{"affected":[{"product":"Concert","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"3.0.1.1","status":"affected","version":"1.0","versionType":"semver"}]}],"cveId":"CVE-2026-15266","cwes":["CWE-78"],"description":"IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794159294696,"publishedAt":1794159294696,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294607"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.1.0\n\n\n\nDownload IBM Concert Software 3.1.0 from Container software library section of IBM Entitled Registry ( ICR https://myibm.ibm.com/products-services/containerlibrary ) and follow  installation instructions https://www.ibm.com/docs/en/concert  depending on the type of deployment."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294607"}],"revision":"5bba8d90512cbb59804af4ddfdd686e905a917b9ec88a46f62eab94f94d77d65","sources":[{"modifiedAt":1794159294696,"name":"CNA: ibm","retrievedAt":1794161330257,"url":"https://www.cve.org/CVERecord?id=CVE-2026-15266"}],"ssvc":null,"status":"published","title":"Multiple Vulnerabilities in IBM Concert Software","updatedAt":1794161330257}