CVE-2026-17637
published 2026-09-22CVE-2026-17637: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of…
PriorityP354high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.24%
14.5th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager for RedHat OpenShift deserialization
vuldb·2026-09-23·CVSS 8.8
CVE-2026-17637 [HIGH] IBM Financial Transaction Manager for RedHat OpenShift deserialization
A vulnerability has been found in IBM Financial Transaction Manager for RedHat OpenShift and classified as very critical. Affected by this issue is some unknown functionality. The manipulation leads to deserialization.
This vulnerability is documented as CVE-2026-17637. The attack can be initiated remotely. There is not any exploit available.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
ghsa_unreviewed·2026-09-23
CVE-2026-17637 [HIGH] CWE-502 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published