Is CVE-2026-6928 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-6928?

CVE-2026-6928 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-6928

Description

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.