CVE-2026-3303
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Oct 19, 2026
Vendor
unknown
Description
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.