CVE-2026-18134
published 2026-09-22CVE-2026-18134: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.20%
8.8th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager cleartext transmission
vuldb·2026-09-23·CVSS 7.5
CVE-2026-18134 [HIGH] IBM Financial Transaction Manager cleartext transmission
A vulnerability categorized as problematic has been discovered in IBM Financial Transaction Manager. This impacts an unknown function. The manipulation results in cleartext transmission of sensitive information.
This vulnerability is known as CVE-2026-18134. It is possible to launch the attack remotely. No exploit is available.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
ghsa_unreviewed·2026-09-23
CVE-2026-18134 [HIGH] CWE-319 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-23040 kernel: wifi: mac80211_hwsim: fix typo in frequency notification
bugzilla·2026-02-04
CVE-2026-23040 [MEDIUM] CVE-2026-23040 kernel: wifi: mac80211_hwsim: fix typo in frequency notification
CVE-2026-23040 kernel: wifi: mac80211_hwsim: fix typo in frequency notification
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211_hwsim: fix typo in frequency notification
The NAN notification is for 5745 MHz which corresponds to channel 149
and not 5475 which is not actually a valid channel. This could result in
a NULL pointer dereference in cfg80211_next_nan_dw_notif.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026020438-CVE-2026-23040-1980@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:18134 https://access.redhat.com/errata/RHSA-2026:18134
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2026:18587 h
Bugzilla
CVE-2025-38015 kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
bugzilla·2025-06-18·CVSS 5.5
CVE-2025-38015 [MEDIUM] CVE-2025-38015 kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
CVE-2025-38015 kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
Memory allocated for idxd is not freed if an error occurs during
idxd_alloc(). To fix it, free the allocated memory in the reverse order
of allocation before exiting the function in case of an error.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025061844-CVE-2025-38015-84e8@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:18134 https://access.redhat.com/errata/RHSA-2026:18134
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux
Bugzilla
CVE-2025-37980 kernel: block: fix resource leak in blk_register_queue() error path
bugzilla·2025-05-20·CVSS 5.5
CVE-2025-37980 [MEDIUM] CVE-2025-37980 kernel: block: fix resource leak in blk_register_queue() error path
CVE-2025-37980 kernel: block: fix resource leak in blk_register_queue() error path
In the Linux kernel, the following vulnerability has been resolved:
block: fix resource leak in blk_register_queue() error path
When registering a queue fails after blk_mq_sysfs_register() is
successful but the function later encounters an error, we need
to clean up the blk_mq_sysfs resources.
Add the missing blk_mq_sysfs_unregister() call in the error path
to properly clean up these resources and prevent a memory leak.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025052040-CVE-2025-37980-561f@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:18134 https://access.redhat.com/errata/RHSA-2026:18134
---
This
2026-09-22
Published