VULNERABILITY INTELLIGENCE

CVE-2026-6544

CVSS score6.2 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-09-24
Last modified2026-09-28
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

Weakness classification

  • psirt@us.ibm.com: CWE-552

Primary references