CyberRota Analysis
AI-GeneratedIBM Concert versions 1.0.0 to 3.0.0 are vulnerable due to improper handling of operating system commands, allowing attackers with local access to exploit the search path environment. This can lead to the execution of untrusted or malicious code, posing a significant risk to system integrity. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.
CVE
CVE-2026-6935
Severity
HIGH
CVSS
7.8
EPSS
0.12%
Original NVD Description
IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)