CVE-2026-6499

LowCVSS 2.4

Published: 04/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

Risk Assessment

An attacker could replace executable files, potentially leading to malicious code execution and system compromise.

Recommendation

Upgrade OpenConcerto to a version newer than 1.7.5 as soon as available, and verify permissions on binary directories.

Other vulnerabilities in OpenConcerto

CVE-2026-6500Medium
A plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows retrieval of embedded sensitive data. This issue affects OpenConcerto 1.7.5.

Original NVD description (English source)

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS