EUVD-2026-85669
GHSA-7h6c-6c8f-m5jg
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-facing but reliable UAF exploitation needs heap grooming (AC:H) and Concert input is typically authenticated (PR:L); successful code execution justifies full C/I/A high.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
AnalysisAI
Use-after-free in IBM Concert 1.0.0 through 3.0.0 lets an attacker who can influence program input or execution flow corrupt heap memory, crash the application, or potentially hijack control flow for code execution. No public exploit code and no confirmed active exploitation were identified at time of analysis, and IBM has published a vendor fix (advisory node 7288830). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to influence program input or execution flow of IBM Concert to trigger the freed-memory access - the description does not specify an unauthenticated network endpoint or a particular feature, so the exact trigger surface is unconfirmed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The input assigns CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) for a CWE-416 use-after-free, but this rating is questionable against the description. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix: patch data indicates a fix is available from IBM per the advisory at https://www.ibm.com/support/pages/node/7288830, so upgrade IBM Concert to the corrected release listed there - the input data does not disclose an exact fix version string, so confirm the target build number against that advisory before closing the finding (verifying release notes avoids redeploying an intermediate build that still carries the defect). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all IBM Concert instances running versions 1.0.0 through 3.0.0 and apply the vendor patch referenced in advisory node 7288830; if immediate patching is not possible, restrict network access to Concert services and enforce multifactor authentication. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution in IBM Concert 1.0.0 through 3.0.0 lets any attacker who can reach the service sen
Improper bounds checking in IBM Concert 1.0.0 through 3.0.0 lets a local, authenticated user supply overlong input that
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. Rated critical severity (CVSS 9.8)
IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute. Rated
Improperly scoped role-based access control in IBM Concert 1.0.0 through 3.0.0 lets any authenticated user holding even
SQL injection in IBM Concert versions 1.0.0 through 2.3.1 allows remote attackers to inject specially crafted SQL statem
Concert versions up to 2.1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions
Local privilege escalation in IBM Concert 1.0.0 through 3.0.0 lets an attacker who already holds a low-privileged accoun
Heap memory corruption in IBM Concert 1.0.0 through 3.0.0 lets an attacker who already has low-privileged local access t
Concert versions up to 2.1.0 is affected by incorrect permission assignment for critical resource (CVSS 7.4).
An authenticated remote user of IBM Concert versions 1.0.0 through 3.0.0 can degrade or deny service availability by dri
Same weakness CWE-416 – Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today