CVE-2026-15915
Medium · 6.2CVSS
6.2
EPSS
0.1%
Published
Sep 22, 2026
CISA due date
—
The record
IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120501 An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the… CWE-552
- CVE-2026-84172 Files accessible to external parties in Apache Wicket. CWE-552
- CVE-2026-61730 SOCFortress CoPilot focuses on providing a single pane of glass for all your security… CWE-552
- CVE-2026-119201 Nuxt is an open-source web development framework for Vue.js. CWE-552
- CVE-2026-67073 HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control… CWE-552
- CVE-2026-65210 This issue may allow an authenticated IPMI Administrator to read arbitrary files from the… CWE-552
- CVE-2026-46651 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-552
- CVE-2026-114400 Trudesk through 1.2.11 contains a missing authentication vulnerability that allows… CWE-552