CVE-2026-3660: IBM Engineering Lifecycle Management

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

Affected products

• IBM Engineering Lifecycle Management: version 7.0.3 only; version 7.1.0 only; version 7.2.0 only

Published 2026-05-26. Last modified 2026-07-24.