Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 05:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

160-73% vs 7-day avg of 598

2 critical, 46 high, 62 medium, 30 low

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.5	CVE-2026-6719	IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-6719IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. From the advisory IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Medium	6.1	CVE-2026-4413	IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-4413IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting From the advisory IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Medium	4.0	CVE-2026-4405	IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-4405IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. From the advisory IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Medium	5.3	CVE-2026-3628	IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-3628IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. From the advisory IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Low	3.7	CVE-2026-3303	IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to... IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-3303IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to... From the advisory IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Medium	4.7	CVE-2026-1510	IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-1510IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. From the advisory IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Low	3.7	CVE-2026-1501	IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. IBMIBM Concert	NVD	Oct 19 18:17 UTC
CVE-2026-1501IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. From the advisory IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 18:17 UTC Read the advisory
	Low	3.7	CVE-2026-6930	IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBMIBM Concert	NVD	Oct 19 17:17 UTC
CVE-2026-6930IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. From the advisory IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 17:17 UTC Read the advisory
	Medium	5.3	CVE-2026-15661	IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. IBMIBM Concert	NVD	Oct 19 17:17 UTC
CVE-2026-15661IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. From the advisory IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affects IBM IBM Concert NIST National Vulnerability DatabasePublished Oct 19, 2026 17:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects