CVE-2026-6544: IBM Concert

Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

Affected products

• IBM Concert: from 1.0.0, up to and including 3.0.0

Published 2026-09-24. Last modified 2026-09-28.