CVE-2026-17618

Received Received - Intake

IBM FTM for RedHat OpenShift Authorization Bypass

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-17618

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift allows a remote unauthenticated attacker to view and modify sensitive information. It also enables denial of service due to improper authorization checks.

Impact Analysis

An attacker could access or alter sensitive financial data, disrupt services by causing a denial of service, or gain unauthorized control over the system. This could lead to financial loss, data breaches, or operational disruptions.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations due to unauthorized data access or modification. It may result in legal penalties, loss of trust, and regulatory fines.

Mitigation Strategies

Apply the latest security patches from IBM for Financial Transaction Manager (FTM) on RedHat OpenShift. Ensure proper authorization checks are enforced and restrict network access to the FTM service to trusted sources only.

Hi! I’m here to help you understand CVE-2026-17618. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70