CVE-2026-18170

Analyzed Analyzed - Analysis Complete

IBM Financial Transaction Manager Denial of Service Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-10-06

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-10-06

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-11

NVD

CVE-2026-18170

EUVD

EUVD-2026-84939

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	From 4.0.7.0 (inc) to 4.0.11.0 (exc)
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a denial of service attack. A remote attacker could exploit this by causing the system to allocate excessive resources without proper limits or throttling, leading to service disruption.

Impact Analysis

This vulnerability could allow an attacker to disrupt the availability of IBM FTM services running on RedHat OpenShift. This may result in downtime, preventing legitimate users from accessing financial transaction processing capabilities.

Compliance Impact

This vulnerability could lead to a denial of service due to resource exhaustion, which may disrupt critical financial transaction processing. This could impact compliance with standards like GDPR (availability requirements) and HIPAA (system reliability for protected health information) by causing service disruptions or data processing delays.

Mitigation Strategies

Apply IBM-provided patches or updates for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address resource allocation issues. Monitor network traffic for unusual patterns that may indicate denial of service attempts. Limit exposure by restricting access to FTM services via network segmentation or firewall rules.

Hi! I’m here to help you understand CVE-2026-18170. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70