CVE-2026-18161

Received Received - Intake

IBM FTM for RedHat OpenShift Log Falsification Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-18161

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-778	When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift allows a remote authenticated attacker to falsify transaction audit logs by improperly validating a client-supplied HTTP header. This could lead to incorrect or manipulated records of financial transactions.

Impact Analysis

This vulnerability could allow attackers to alter audit logs, making it difficult to detect fraudulent transactions or ensure financial integrity. It may lead to financial losses, regulatory penalties, or reputational damage if transactions are falsified without detection.

Compliance Impact

This vulnerability could impact compliance by allowing falsified audit logs, which are critical for demonstrating adherence to regulations like GDPR and HIPAA. Organizations may fail audits or face legal consequences if transaction records cannot be trusted.

Mitigation Strategies

Implement strict validation for HTTP headers in IBM FTM for RedHat OpenShift to prevent falsification of transaction audit logs. Ensure all client-supplied headers are properly sanitized and validated before processing.

Hi! I’m here to help you understand CVE-2026-18161. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70