CVE-2026-18152
published 2026-09-22CVE-2026-18152: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of…
PriorityP346high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.18%
7.5th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager for RedHat OpenShift Cryptographic Signature Verification signature verification
vuldb·2026-09-23·CVSS 7.4
CVE-2026-18152 [HIGH] IBM Financial Transaction Manager for RedHat OpenShift Cryptographic Signature Verification signature verification
A vulnerability labeled as problematic has been found in IBM Financial Transaction Manager for RedHat OpenShift. Affected by this vulnerability is an unknown functionality of the component Cryptographic Signature Verification. Such manipulation leads to improper verification of cryptographic signature.
This vulnerability is uniquely identified as CVE-2026-18152. The attack can be launched remotely. No exploit exists.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
ghsa_unreviewed·2026-09-23
CVE-2026-18152 [HIGH] CWE-347 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published