CVE-2026-6544

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

  • Published Sep 24, 2026
  • CVSS 6.2 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

In the news

CVE-2026-6544 at the National Vulnerability Database