Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Concert 1.0.0 through 2.1.0 for Z hub component is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2025-36018 IBM Concert 1.0.0 through 2.1.0 for Z hub component is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized ac… https://www.cve.org/CVERecord?id=CVE-2025-36018
Post summary
IBM Concert’s Z hub component is disclosed to be vulnerable to CSRF, potentially enabling unauthorized access; details are available at the linked CVE record.
CVE-2025-36018 Cross-Site Request Forgery Vulnerability in IBM Concert 1.0.0 Through 2.1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36018
Post summary
This post announces a new CVE-2025-36018, detailing a Cross‑Site Request Forgery vulnerability affecting IBM Concert versions 1.0.0–2.1.0, with no PoC, exploit, or patch information provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | concert | - | - | - |
| OS | linux | linux_kernel | - | - | - |