Evil-DB LogoEvil-DB
← All CVEs

CVE-2026-3660

critical · 9.8

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

9.8
CVSS
0.6%
EPSS (exploit prob.)
46th
EPSS percentile
2026-05-26
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-863

Affected products

VendorProductAffected versions
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.0.3
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.1.0
ibmengineering_lifecycle_management7.2.0
ibmengineering_lifecycle_management7.2.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-3660