CVE-2025-33015
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Jan 20, 2026
CISA due date
—
The record
IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|