CVE-2026-6544

MediumCVSS 6.2/10Last modified Sep 28, 2026

Description

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2026
Last modified
Sep 28, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-654407.1Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.CVE-2026-654417.1Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.CVE-2026-654427.2Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.CVE-2026-654437.1Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.CVE-2026-654456.5Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.CVE-2026-654467.1Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.CVE-2026-654477.1Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.CVE-2026-654486.5Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.CVE-2026-654496.5Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.CVE-2026-654508.5Contributor SQL Injection in MapSVG <= 8.14.0 versions.CVE-2026-654518.5Contributor SQL Injection in MapSVG <= 8.14.0 versions.CVE-2026-654525.3Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
CVE-2026-6544: Medium severity, CVSS 6.2 | Vulnix