9.8 CriticalCWE-863
CVE-2026-3660
IBM Engineering Lifecycle Management vulnerability
IBMEngineering Lifecycle Management
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.
Coverage 1 article · 1 outlet
- IBM patches CVE-2026-3660 flaw in Jazz Foundation platformSecurityOnline · first in our coverage