CVE-2026-18124
published 2026-09-22CVE-2026-18124: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected…
PriorityP427medium6.5CVSS 3.1
AVLACLPRLUINSCCHINAN
EPSS
0.10%
0.6th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager insufficiently protected credentials
vuldb·2026-09-23·CVSS 6.5
CVE-2026-18124 [MEDIUM] IBM Financial Transaction Manager insufficiently protected credentials
A vulnerability has been found in IBM Financial Transaction Manager and classified as problematic. This issue affects some unknown processing. This manipulation causes insufficiently protected credentials.
This vulnerability is registered as CVE-2026-18124. The attack needs to be launched locally. No exploit is available.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
ghsa_unreviewed·2026-09-23
CVE-2026-18124 [MEDIUM] CWE-522 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published