CVE-2026-18095
published 2026-09-22CVE-2026-18095: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
PriorityP356high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.44%
37.3th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager for RedHat OpenShift buffer overflow
vuldb·2026-09-23·CVSS 8.5
CVE-2026-18095 [HIGH] IBM Financial Transaction Manager for RedHat OpenShift buffer overflow
A vulnerability marked as very critical has been reported in IBM Financial Transaction Manager for RedHat OpenShift. This impacts an unknown function. This manipulation causes buffer overflow.
The identification of this vulnerability is CVE-2026-18095. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
ghsa_unreviewed·2026-09-23
CVE-2026-18095 [HIGH] CWE-787 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published