High · 8.8 CVE-2025-33015 EUVD-2026-3360GHSA-gmqg-6pjr-jj57

Multiple Vulnerabilities in IBM Concert Software

Published Jan 20, 2026 · Updated Feb 26, 2026 · Assigned by ibm

Description

IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.

Vendor	Product	Affected	Fixed
IBM	Concert	1.0.0 – ≤ 2.1.0	—