CVE-2026-18156

Received Received - Intake

IBM FTM for RedHat OpenShift Authorization Bypass

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-18156

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability allows a remote authenticated attacker to bypass security controls by forging user identities. It occurs due to improper authorization in IBM Financial Transaction Manager for RedHat OpenShift.

Impact Analysis

An attacker could exploit this to impersonate legitimate users, potentially gaining unauthorized access to sensitive financial transactions or data. This could lead to fraud, data breaches, or unauthorized system changes.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating compliance requirements such as GDPR or HIPAA. Organizations may face legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Apply the latest security patches or updates provided by IBM for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address the improper authorization issue.

Hi! I’m here to help you understand CVE-2026-18156. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70