CVE-2026-6327: IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special

CVE-2026-6327 · Severity: medium · CVSS 4.3 · Published 2026-09-23

Executive brief

IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

References

https://www.ibm.com/support/pages/node/7288830