CVE-2026-4051

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Score

CVSS 3.1 7.2 High

Status

Analyzed - psirt@us.ibm.com

Published

2026-05-26

Last modified

2026-05-28

Weaknesses

CWE-749

Affected products

• Engineering Lifecycle Management (Ibm)

References

• https://www.ibm.com/support/pages/node/7274077