CVE-2026-4405

LOW
INFO Priority: 0.01 BB Relevance: 32/100
Published: 2026-10-19 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
ibm concert 1.0.0 – 3.0.0

References & Advisories (1)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.16%
Raw Score 0.001590
Percentile 5.1%
Date 2026-11-03

Intelligence Sources

nvd ref →