Remote Code Execution Vulnerability in IBM Financial Transaction Manager for RedHat OpenShift
CVE-2026-18177

7.1HIGH

Key Information:

Vendor

IBM
Status
Financial Transaction Manager (ftm) for Red Hat Openshift
Vendor
CVE Published:
23 September 2026

What is CVE-2026-18177?

A security flaw exists in IBM Financial Transaction Manager for RedHat OpenShift that can potentially allow remote attackers to perform unauthorized payment actions. The vulnerability arises from the lack of necessary authorization checks, which could lead to the exploitation of payment processing functionalities.

Affected Version(s)

Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 <= 4.0.10.0

References

https://www.ibm.com/support/pages/node/7288641
vendor-advisorypatch

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.