CVE-2026-3628

MediumCVSS 5.3/10Last modified Oct 22, 2026

Description

IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 19, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-36298.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1CVE-2026-36309.8Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.CVE-2026-36317.5Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.CVE-2026-36325.5A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not proCVE-2026-363246.1SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in CVE-2026-36336.5A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitCVE-2026-36346.5A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CCVE-2026-363408.1An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email functionCVE-2026-363415.4Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the coCVE-2026-36356.1Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a subnet, a hop coCVE-2026-363557.7The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access controCVE-2026-363569.1The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injec
CVE-2026-3628: Medium severity, CVSS 5.3 | Vulnix