AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-16426

IBM Concert: server-side request forgery

IBM

CVE-2026-16426 · Published Sep 22, 2026 · updated Nov 3, 2026

Medium6.5
No fix yet
IBM advisory

IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected versions

PackageAffectedFixed in
Concert
Product
>= 1.0.0, <= 3.0.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More IBM advisories

All IBM
Low 3.7Sep 22IBM Financial Transaction Manager for RedHat OpenShift: information disclosureCVE-2026-18173no fix yetHigh 7.4Sep 22IBM Financial Transaction Manager for RedHat OpenShift: information disclosureCVE-2026-18176no fix yetCritical 9.8Sep 22IBM Financial Transaction Manager for RedHat OpenShift: remote code executionCVE-2026-18162no fix yetCritical 9.8Sep 22IBM Financial Transaction Manager for RedHat OpenShift: remote code executionCVE-2026-18163no fix yetCritical 9.9Sep 22IBM Financial Transaction Manager for RedHat OpenShift: information disclosureCVE-2026-18169no fix yetMedium 6.5Sep 22IBM Financial Transaction Manager (FTM) for RedHat OpenShift: denial of serviceCVE-2026-18170no fix yet