CVE-2026-17618
published 2026-09-22CVE-2026-17618: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a…
PriorityP349critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.24%
14.9th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper author
ghsa_unreviewed·2026-09-23
CVE-2026-17618 [HIGH] CWE-862 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper author
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
VulDB
IBM Financial Transaction Manager improper authorization
vuldb·2026-09-22·CVSS 7.3
CVE-2026-17618 [HIGH] IBM Financial Transaction Manager improper authorization
A vulnerability categorized as very critical has been discovered in IBM Financial Transaction Manager. This vulnerability affects unknown code. Such manipulation leads to improper authorization.
This vulnerability is uniquely identified as CVE-2026-17618. The attack can be launched remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
2026-09-22
Published