PT-2026-43376 · Ibm · Engineering Lifecycle Management

CVE-2026-4051 · Published 2026-05-26 · Updated 2026-05-27

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Management versions 7.0.3 through Interim Fix 021 IBM Engineering Lifecycle Management versions 7.1.0 through Interim Fix 009 IBM Engineering Lifecycle Management versions 7.2.0 through Interim Fix 001

Description An exposed method that is not properly restricted allows an attacker with administrative privileges to execute remote code.

Recommendations Update IBM Engineering Lifecycle Management 7.0.3 to a version later than Interim Fix 021. Update IBM Engineering Lifecycle Management 7.1.0 to a version later than Interim Fix 009. Update IBM Engineering Lifecycle Management 7.2.0 to a version later than Interim Fix 001.

Fix

RCE

Weakness Enumeration

CWE-749

Related Identifiers

BDU:2026-08523

CVE-2026-4051

Affected Products

Engineering Lifecycle Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-4051 · Security Note
• https://bdu.fstec.ru/vul/2026-08523 · Security Note
• https://ibm.com/support/pages/node/7274077 · Patch, Vendor Advisory
• https://t.me/cveNotify/164872 · Telegram Post
• https://t.me/CVEtracker/55012 · Telegram Post