Vulnerability Details CVE-2026-6935
IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.6%
CVSS Severity
CVSS v3 Score 7.8