CVE-2026-6499 - Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries

LOW

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries

Published May 4, 2026

2.4

LOW

CVSS 4.0

EPSS 0.14%

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries.

This issue affects OpenConcerto: 1.7.5.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
ILM Informatique	OpenConcerto	unknown	Affected 1.7.5

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26969		Advisory
https://www.openconcerto.org/fr/version-1.7.html		product

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TCS-CERT

Published May 4, 2026

Updated May 4, 2026

Reserved Apr 17, 2026

CISA Vulnrichment

Updated May 4, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner TCS-CERT

Published May 4, 2026

Updated May 4, 2026

GitHub

No data