Vulnerability · Published May 4, 2026 · Assigned by TCS-CERT
CVE-2026-6499
Low 2.4
In plain English
A low-severity incorrect permission assignment in OpenConcerto from ILM Informatique. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 4.0)2.4Low
Exploit odds (30 days)<0.1%top 99.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ILM Informatique | OpenConcerto | 1.7.5 |
Weakness: CWE-732 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N