Vulnerability · Published Aug 12, 2026 · Assigned by ibm
CVE-2024-27253IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request
Critical 10.0
In plain English
A critical-severity improper authentication in DOORS Next from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)0.6%top 52.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | DOORS Next | 7.0.3 – through 7.0.3 Interim Fix 018 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7282705 vendor-advisory, patch