CVE-2026-17637

Received Received - Intake

IBM Financial Transaction Manager Remote Code Execution via Deserialization

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-17637

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift allows an attacker on the same network to execute arbitrary code. It occurs due to improper deserialization of untrusted data, which can be manipulated to run malicious commands.

Impact Analysis

An attacker could gain control over the FTM system, leading to unauthorized transactions, data breaches, or disruption of financial services. This could affect data integrity, confidentiality, and system availability.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR (data protection) and HIPAA (healthcare data privacy) due to potential unauthorized access to sensitive financial or personal data, resulting in legal penalties and reputational damage.

Mitigation Strategies

Apply IBM-provided patches or updates for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address the deserialization flaw. Isolate affected systems from untrusted networks to limit adjacent-network attack exposure. Monitor IBM security advisories for further guidance.

Hi! I’m here to help you understand CVE-2026-17637. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70