CVE-2025-12767
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.
- Published Sep 22, 2026
- CVSS 5.3 medium
- 0.4% chance of exploitation in the next 30 days (EPSS)