CVE-2026-4051 — IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution

CVE-2026-4051

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution PUBLISHED

Description (CNA)

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

Affected (CNA)

Vendor / product	Versions
IBM / Engineering Lifecycle Management	affected 7.0.3 through Interim Fix 021; affected 7.1.0 through Interim Fix 009; affected 7.2.0 through Interim Fix 001

CWE

CWE-749

References

https://www.ibm.com/support/pages/node/7274077

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.