VulnSocial

CVE-2026-3660General(ibm / engineering_lifecycle_management)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ibm engineering_lifecycle_management systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • engineering_lifecycle_management

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-26); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
ibm
Products
engineering_lifecycle_management

3 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-26: 1Mentions · 2026-05-28: 1Patch / Workaround · 2026-05-28: 1Technical Details · 2026-05-28: 105-2605-28
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-261
General1
2026-05-281
Patch1
Full discourse2 posts
  • Gray Hats@the_yellow_fall
    Patch

    IBM patched a critical IBM Jazz Foundation vulnerability (CVE-2026-3660) with a 9.8 CVSS score. Learn how to secure your property files now. #Cybersecurity #IBM #Vulnerability #AuthenticationBypass #PatchTuesday #Infosec https://securityonline.info/ibm-jazz-foundation-vulnerability-cve-2026-3660/ https://t.co/ud8YibxId2

    Post summary

    IBM has released a patch for the critical CVE‑2026‑3660 flaw in Jazz Foundation, a 9.8‑scored authentication bypass. No active exploitation or PoC is mentioned.

    01020309
    12.5K followersView on X
  • VulDB 🛡@vuldb
    General

    There is a new vulnerability with elevated criticality in IBM Engineering Lifecycle Management (CVE-2026-3660) https://vuldb.com/vuln/365751

    Post summary

    A new critical vulnerability, CVE-2026-3660, has been announced for IBM Engineering Lifecycle Management, but the text provides no further technical details, PoC, or exploitation information.

    0101085
    2.2K followersView on X
CPE platform detail33 entries

33 of 33 entries

PartVendorProductVersionTarget SWTarget HW
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.0.3--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.1.0--
Appibmengineering_lifecycle_management7.2.0--
Appibmengineering_lifecycle_management7.2.0--

Explore more

Back to dashboardibm CVEsengineering_lifecycle_management vulnerabilities