CVE-2026-18172
published 2026-09-22CVE-2026-18172: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML…
PriorityP339high7.4CVSS 3.1
AVAACLPRNUINSCCHINAN
EPSS
0.20%
9.9th percentile
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | — | — |
| ibm | financial_transaction_manager | >= 4.0.7.0 < 4.0.11.0 | 4.0.11.0 |
| ibm | financial_transaction_manager_for_redhat_openshift | 4.0.6.0 – 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Financial Transaction Manager xml external entity reference
vuldb·2026-09-23·CVSS 7.4
CVE-2026-18172 [HIGH] IBM Financial Transaction Manager xml external entity reference
A vulnerability classified as critical has been found in IBM Financial Transaction Manager. This vulnerability affects unknown code. The manipulation leads to xml external entity reference.
This vulnerability is referenced as CVE-2026-18172. Remote exploitation of the attack is possible. No exploit is available.
GHSA
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
ghsa_unreviewed·2026-09-23
CVE-2026-18172 [HIGH] CWE-611 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-22
Published