Findings

CVE-2026-4051

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that i…

Published May 26, 2026 · updated Jul 24, 2026 · ibm engineering lifecycle management

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

  2. Jul 24, 2026 · NIST NVD

    Updated

    IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Affected

  • cpe ibm/engineering lifecycle management7.0.3

Sources

  • CVE.orgVulnerability recordCVE-2026-4051

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4051

    IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

    nvd.nist.gov

References

CVE-2026-4051 · ZeroDay Findings