CVE-2025-33088 HIGH

CVE-2025-33088: Multiple Vulnerabilities in IBM Concert Software.

Vendor Ibm

Product Concert

Weakness CWE-732

Published February 17, 2026

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.4/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to escalate their privileges due to incorrect file permissions for critical resources.

Key dates

02Disclosure timeline

February 17, 2026 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-33088 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html