{"id":"CVE-2026-6928","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-6928","generatedAt":"2026-10-28T01:47:13.349Z","title":"This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.","description":"IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.","published":"2026-09-23T21:17:02.000Z","lastModified":"2026-09-29T14:08:24.000Z","status":"Analyzed","sourceIdentifier":"psirt@us.ibm.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-416"],"affected":["ibm/concert"],"epss":{"score":0.00459,"percentile":0.39561,"date":"2026-10-26","history":[{"date":"2026-09-24","score":0.0045,"percentile":0.36387}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-23T21:17:02.000Z","detail":{"score":"9.8","severity":"CRITICAL","publishedAt":"2026-09-23T21:17:02.430Z"},"summary":"New CVE, critical severity (CVSS 9.8)."}],"references":[{"url":"https://www.ibm.com/support/pages/node/7288830","tags":["Patch","Vendor Advisory"],"source":"psirt@us.ibm.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-6928","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}