CVE-2026-17647

Received Received - Intake

IBM FTM for RedHat OpenShift Command Injection

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-17647

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-829	The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift allows a local attacker to execute arbitrary commands. This is due to the inclusion of functionality from an untrusted control sphere, which could be exploited to run unauthorized commands on the system.

Impact Analysis

An attacker could gain control of the system, leading to unauthorized access, data breaches, or further compromise of financial transactions. The high CVSS score (8.8) indicates significant risk, including potential for complete system takeover.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance risks include legal penalties, fines, and reputational damage.

Mitigation Strategies

Apply the latest security patches or updates from IBM for Financial Transaction Manager (FTM) on RedHat OpenShift. Restrict local user access to only trusted personnel and monitor for unusual command execution activities.

Hi! I’m here to help you understand CVE-2026-17647. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70