CVE-2026-4051: IBM Engineering Lifecycle Management

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Affected products

• IBM Engineering Lifecycle Management: version 7.0.3 only; version 7.1.0 only; version 7.2.0 only

Published 2026-05-26. Last modified 2026-07-24.