CVE-2026-18161
published 2026-09-22CVE-2026-18161: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper…
PriorityP424medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.21%
10.1th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
ghsa_unreviewed·2026-09-23
CVE-2026-18161 [MEDIUM] CWE-778 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
VulDB
IBM Financial Transaction Manager RedHat OpenShift input validation
vuldb·2026-09-23·CVSS 4.3
CVE-2026-18161 [MEDIUM] IBM Financial Transaction Manager RedHat OpenShift input validation
A vulnerability identified as problematic has been detected in IBM Financial Transaction Manager. Affected is an unknown function of the component RedHat OpenShift. This manipulation causes improper input validation.
This vulnerability is handled as CVE-2026-18161. The attack can be initiated remotely. There is not any exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published