Findings

CVE-2025-36084

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Published Sep 22, 2026 · updated Oct 14, 2026

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 22, 2026 · NIST NVD

    Detected

    IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

  2. Oct 14, 2026 · NIST NVD

    Updated

    IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Sources

  • CVE.orgCVE-2025-36084

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-36084

    IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

    nvd.nist.gov

References