SEPTEMBER 29, 2026
Live Feed
Back to database
Case File

CVE-2026-6794

HIGH · CVSS 7.8 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-09-29

CyberRota Analysis

AI-Generated

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a double free memory management flaw, allowing local attackers to corrupt heap memory. Successful exploitation could lead to arbitrary code execution within the context of the affected process. Organizations using these versions should prioritize patching to mitigate the risk of potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-6794
Severity
HIGH
CVSS
7.8
EPSS
N/A

Original NVD Description

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

Related CVEs

Other vulnerabilities affecting the same vendor(s)