---
id: "CVE-2026-6930"
kind: "vulnerability"
aliases: ["CVE-2026-6930"]
title: "IBM Concert: weak cryptography could let attackers decrypt sensitive information"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ibm-concert", "self-hosted", "vendor"]
not_affected_if: []
published_at: "2026-10-19T17:17:21+00:00"
first_seen_at: "2026-10-23T21:57:18+00:00"
updated_at: "2026-10-25T04:44:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6930", "first_seen_at": "2026-10-23T21:57:18+00:00"}]
---

# IBM Concert: weak cryptography could let attackers decrypt sensitive information

IBM Concert versions 1.0 through 3.0.0 use cryptographic algorithms weaker than expected. An attacker who captures the protected data could decrypt highly sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed IBM Concert version against the affected range `1.0` through `3.0.0`
- unknown

## Fix

- Move IBM Concert to a version newer than `3.0.0` once IBM publishes one
- unknown

## Timeline

- 2026-10-23T21:57:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-6930

## From the sources

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_