AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

IBMCVE-2026-15661

IBM Concert: unauthorized user could inject data into log messages

IBM

CVE-2026-15661 · Published Oct 19, 2026 · updated Nov 3, 2026

Medium5.3
No fix yet
IBM advisory

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Affected versions

PackageAffectedFixed in
Concert
Product
>= 1.0.0, <= 3.0.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-117

More IBM advisories

All IBM
Medium 6.5Oct 19IBM Storage TS4500 Library: denial of serviceCVE-2025-36061no fix yetMedium 5.5Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36069no fix yetMedium 6.3Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36252no fix yetHigh 7.5Oct 19IBM Concert: information disclosureCVE-2026-6719no fix yetLow 3.7Oct 19IBM Concert: attacker could carry out privileged actions as the domainCVE-2026-3303no fix yetMedium 5.3Oct 19IBM Concert: information disclosureCVE-2026-3628no fix yet