CVE-2026-17472 — Vulnerability intelligence

ibm — concert

Published: 2026-09-22T21:26:50.380Z

CVSS

9.6

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.

Sources

• CVE-2026-17472
• Vendor Advisory
• CVE-2026-17472