CVE-2026-6719
7.5HighPublished 19 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-330
Impact
Unauthenticated remote attackers can decrypt highly sensitive information over the network. They need network access to intercepted communications or encrypted data.
Root cause
The application implements weaker than expected cryptographic algorithms for protecting data.
Affected systems
IBM Concert 1.0 through 3.0.0
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Fix & remediation
Upgrade to a version newer than 3.0.0 per vendor guidance at https://www.ibm.com/support/pages/node/7292374. If patching must wait, restrict network access to the IBM Concert interface to trusted hosts.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.