rootpwn

medium · CVSS v3 6.5

CVE-2026-17465

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a denial-of-service attack. An authenticated user can trigger the flaw by exceedi

Overview

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a denial-of-service attack. An authenticated user can trigger the flaw by exceeding storage limits, causing the application to become unresponsive. This impacts availability for organizations running these versions.

Description

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits.

Impact

Denial of service reduces availability of the IBM Concert application, disrupting business processes. The vulnerability is exploitable only by authenticated users, so internal staff or compromised accounts are the primary threat actors. Defenders should monitor for abnormal resource consumption and ensure proper storage quotas are enforced.

Remediation

Apply the latest IBM Concert patch that enforces storage limits, or upgrade to a supported version beyond 3.0.0. If patching is not immediately possible, configure application-level resource limits and monitor disk usage to prevent exhaustion. Disable or restrict privileged accounts that can trigger the flaw until remediation.

Risk context

Severity is medium (CVSS 6.5). No EPSS data available. The risk is moderate; defenders should prioritize patching but can tolerate a short window if mitigations are in place.

Affected products

  • IBM Concert 1.0.0
  • IBM Concert 2.0.0
  • IBM Concert 3.0.0

Scores

Severity
medium
CVSS v2
6.8
CVSS v3
6.5
CVSS v4
—
EPSS
—

Denial of Service IBM Storage Limits Authentication Availability Patch Concert

← All CVEs

Related CVEs

medium

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account does not provide normal administrator access; additional vulnerabilities are required to obtain an administrator takeover. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-92929

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the affected non-TLS web interfaces and disclose configuration information. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-92930

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a valid unlock code offline and use it to reset the administrator password. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-95829

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java of the component Pagination Inner Interceptor. The manipulation of the argument orders[0].column leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is ea7f0fae7cb0fd998a3284c11addce689350cd69. It is suggested to install a patch to address this issue.

View analysis