{"affected":[{"product":"Concert","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"3.0.1.1","status":"affected","version":"1.0","versionType":"semver"}]}],"cveId":"CVE-2026-6715","cwes":["CWE-78"],"description":"IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system with the privileges of the affected service.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794163093002,"publishedAt":1794163093002,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294607"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.1.0\n\n\n\nDownload IBM Concert Software 3.1.0 from Container software library section of IBM Entitled Registry ( ICR https://myibm.ibm.com/products-services/containerlibrary ) and follow  installation instructions https://www.ibm.com/docs/en/concert  depending on the type of deployment."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294607"}],"revision":"ed700644bd4b2eb12853496354ff8dfb7a6b36d2ae395a2e36d364335324287f","sources":[{"modifiedAt":1794163093002,"name":"CNA: ibm","retrievedAt":1794164934015,"url":"https://www.cve.org/CVERecord?id=CVE-2026-6715"}],"ssvc":null,"status":"published","title":"Multiple Vulnerabilities in IBM Concert Software","updatedAt":1794164934015}