IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.
[POC] CVE-2026-67181 — CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-
Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)
[POC] CVE-2026-67182 — CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille-
Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)
[POC] CVE-2026-67183 — CVE-2026-67183-Unauthenticated-Memory-Leak-Leads-To-Memory-Exhaustion-TinyWeb-
Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)
[POC] CVE-2026-67184 — CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-
Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)
[POC] CVE-2026-67185 — CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-
Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free