Live › vulnerability › CVE-2026-6719
Go to dashboardIBM Concert versions 1.0 through 3.0.0 use weaker-than-expected cryptographic algorithms. An attacker who captures the protected data can decrypt highly sensitive information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any team running IBM Concert Software, IBM's self-hosted/container-deployed platform, at versions 1.0 through 3.0.0. The flaw is weak randomness (CWE-330) in its cryptography, so someone who can capture protected data could decrypt it; IBM rates it high (7.5, network, no auth). Teams not running Concert can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| IBM Concert Software | vendor | >= 1.0, <= 3.0.0 | 3.0.1.1 |
3.0.0 is affected; 3.0.1.1 is fixed3.0.1.1 (download from the Container software library in the IBM Entitled Registry, ICR)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-6719")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.