CVE-2026-18169
published 2026-09-22CVE-2026-18169: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper…
PriorityP354critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.54%
44.4th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.
ghsa_unreviewed·2026-09-23
CVE-2026-18169 [CRITICAL] CWE-22 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.
VulDB
IBM Financial Transaction Manager information disclosure
vuldb·2026-09-23·CVSS 9.9
CVE-2026-18169 [CRITICAL] IBM Financial Transaction Manager information disclosure
A vulnerability, which was classified as problematic, was found in IBM Financial Transaction Manager. The affected element is an unknown function. Such manipulation leads to information disclosure.
This vulnerability is listed as CVE-2026-18169. The attack may be performed from remote. There is no available exploit.
No detection rules found.
No public exploits indexed.
2026-09-22
Published