Veille CVE

Samedi 29 août 2026

2 CVE

  1. CVE-2026-3627 9.1 Critique

    IBM Concert

    IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

  2. CVE-2025-64649 5.9 Moyenne

    IBM Concert

    IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.