CVE-2026-15661

Published: Oct 19, 2026Modified: Oct 22, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Related CWEs

CWE-117

Improper Output Neutralization for Logs

The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (1)

https://www.ibm.com/support/pages/node/7292374

Source: psirt@us.ibm.com

Timeline

No history available yet.