CVE-2026-18133

Received Received - Intake

IBM FTM Path Traversal on RedHat OpenShift

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-18133

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift allows a remote authenticated attacker to modify server files by exploiting a path traversal flaw. This means the attacker can access or alter files outside the intended directory structure.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized file modifications on the server, potentially disrupting services, exposing sensitive data, or enabling further attacks. The impact depends on the attacker's goals and the server's configuration.

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized access or modification of sensitive data, which may breach GDPR, HIPAA, or other regulations. Organizations must address it to maintain compliance.

Mitigation Strategies

Apply IBM-provided patches or updates for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address the path traversal vulnerability. Ensure access controls are properly configured to limit authenticated user permissions and restrict file modification capabilities.

Hi! I’m here to help you understand CVE-2026-18133. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70