CVE-2026-3303 — Vulnerability intelligence

ibm — concert

Published: 2026-10-19T18:17:07.387

CVSS

3.7

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

Sources

• CVE-2026-3303
• Vendor Advisory