CVE-2026-4405
LOWCVSS 3.3/10EPSS 0.16%
Last modified
CVE-2026-4405 is a low-severity vulnerability rated 3.3/10 on the CVSS scale. IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Concert | >= 1.0.0, <= 3.0.0 |
References
- https://www.ibm.com/support/pages/node/7292374Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-4405?
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.
How severe is CVE-2026-4405?
CVE-2026-4405 has a CVSS score of 3.3/10 (LOW severity). The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2026-4405?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-44041UltraVNC through 1.8.2.2 contains an out-of-bounds read in t…6.5
- CVE-2026-44042UltraVNC repeater through 1.8.2.2 contains an off-by-one err…3.7
- CVE-2026-44046Use of Less Trusted Source vulnerability in Apache APISIX. …5.8
- CVE-2026-44047An SQL injection vulnerability in the MySQL CNID backend in …8.8
- CVE-2026-44048A stack-based buffer overflow via UCS-2 type confusion in co…8.8
- CVE-2026-44049An out-of-bounds write due to improper null termination in c…7.5
- CVE-2026-44050A heap-based buffer overflow in the CNID daemon comm_rcv() f…9.9
- CVE-2026-44051An improper link resolution vulnerability in Netatalk 3.0.2 …8.1
- CVE-2026-44052Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwo…7.5
- CVE-2026-44053Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic alg…7.4
- CVE-2026-44054Netatalk 2.0.0 through 4.4.2 generates AFP session tokens de…6.5
- CVE-2026-44055A logic error involving bitwise OR operations in Netatalk 3.…7.5
Are you affected by CVE-2026-4405?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST