CVE-2026-3628
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
Oct 19, 2026
CISA due date
—
The record
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120971 A flaw was found in RESTEasy's default exception mapper. CWE-209
- CVE-2026-105770 Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to… CWE-209
- CVE-2026-62979 jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. CWE-209
- CVE-2026-118643 n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential… CWE-209
- CVE-2026-67080 HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper… CWE-209
- CVE-2026-118272 A vulnerability was detected in a2ui-project a2ui up to 0.10.6. CWE-209
- CVE-2026-108316 Tanium addressed an information disclosure vulnerability in Tanium Server. CWE-209
- CVE-2026-116478 A vulnerability was detected in a2aproject a2a-go up to 2.4.0. CWE-209