{"metadata": {"vulnerability": "CVE-2026-6715", "count": 15, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-04-20T18:45:25.752Z", "date_only": false, "value": "2026-04-20T18:45:25.752Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-6715", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-08T18:45:19.754Z", "date_only": false, "value": "2026-11-08T18:45:19.754767Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117582300398332162", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "5ac880cf-1f0a-46e1-85d5-0835ba0d1a66", "content": "CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary commands on the underlying operating system with the privileges of the affected service.\nhttps://www.cve.org/CVERecord?id=CVE-2026-6715https://www.ibm.com/support/pages/node/7294607#ibm #IBM #Concert#CVE_2026_6715#bot", "url": "https://infosec.exchange/users/cve/statuses/117582300398332162"}, {"timestamp": "2026-11-08T19:14:37.311Z", "date_only": false, "value": "2026-11-08T19:14:37.311620Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117582415586684601", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "fc3bb57c-7a1e-4af4-bddd-6089ab475f23", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting IBM Concert (CVE-2026-6715) https://vuldb.com/vuln/432984", "url": "https://infosec.exchange/users/vuldb/statuses/117582415586684601"}, {"timestamp": "2026-11-08T19:17:39Z", "date_only": false, "value": "2026-11-08T19:17:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HGHW-5993-52M4", "record": "GHSA-HGHW-5993-52M4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-08T19:17:39.980Z", "date_only": false, "value": "2026-11-08T19:17:39.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6715", "record": "FKIE_CVE-2026-6715", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T19:17:40.093Z", "date_only": false, "value": "2026-11-08T19:17:40.093", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6715", "record": "FKIE_CVE-2026-6715", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-08T19:40:04.549Z", "date_only": false, "value": "2026-11-08T19:40:04.549417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzt63isiof2o", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "d86aa5ff-5aa5-4cf1-9926-f99ba9856630", "content": "CVE-2026-6715 - concert\nVersions 1.0 through 3.0.1.1 of IBM Concert accept input that is placed directly into system commands without proper checks. An attacker could send specially crafted data to make the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concert #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzt63isiof2o"}, {"timestamp": "2026-11-08T20:08:18.305Z", "date_only": false, "value": "2026-11-08T20:08:18.305024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzt7nz6dph2u", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "ef7f29b7-8263-4dac-b5c1-81ad03f09cd3", "content": "\ud83d\udea8 CVE-2026-6715 \u2014 CVSS 9.8 CRITICAL\n\nIBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an op...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-6715\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzt7nz6dph2u"}, {"timestamp": "2026-11-08T21:30:33Z", "date_only": false, "value": "2026-11-08T21:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HGHW-5993-52M4", "record": "GHSA-HGHW-5993-52M4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T21:30:33Z", "date_only": false, "value": "2026-11-08T21:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HGHW-5993-52M4", "record": "GHSA-HGHW-5993-52M4", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "f616d0b9-a4c0-41a4-8887-d1a473b1f7d5"}, {"timestamp": "2026-11-09T00:16:43.014Z", "date_only": false, "value": "2026-11-09T00:16:43.014228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mztnk7gtvs2o", "record": "CVE-2026-6715", "field": "creation_timestamp", "uuid": "4a1f8d74-6e9f-4317-9088-5d2aeb4d54c0", "content": "\ud83d\udd34 CVE-2026-6715 - Critical (9.8)\n\nIBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6715/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mztnk7gtvs2o"}], "metrics": {"as_of": "2026-11-09T06:06:58.012Z", "anchors": {"origin": {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 41325.010378, "hours": 11.479169549444444, "days": 0.47829873122685185, "min_seconds": 41325.010378, "max_seconds": 41325.010378, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T18:38:13.002Z", "date_only": false, "value": "2026-11-08T18:38:13.002Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-6715", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T06:06:58.012Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}