CVE-2026-18066: Server-Side Request Forgery (SSRF)

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery...

CVE-2026-18095: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

PT-2026-97074

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper configuration of HTTP method-based security constraints could allow a remote attacker to perform unauthorized actions...

PT-2026-97103

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper restriction of XML external entity references could allow a remote attacker to obtain sensitive information. This issue involves XM...

CVE-2026-18162: Improper Control of Generation of Code

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

PT-2026-97100

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift versions 4.0.6.0 through 4.0.10.0 Description Improper deserialization of untrusted data allows a remote attacker to execute arbitrary code. Deserialization is the process of convertin...

PT-2026-97077

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information and perform unauthorized actions...

CVE-2026-18173: Improper Certificate Validation

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication...

CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

CVE-2026-18137: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command...

PT-2026-97089

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Missing authorization in the software allows a remote authenticated attacker to perform unauthorized payment mutation actions. Recommendatio...

PT-2026-97086

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A remote attacker could cause a denial of service due to the improper use of reflection with externally controlled input. Reflection is a...

PT-2026-97102

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A remote attacker could cause a denial of service in IBM Financial Transaction Manager FTM for RedHat OpenShift. This issue occurs because t...

PT-2026-97090

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A path traversal issue exists that could allow a remote authenticated attacker to modify server files. Path traversal is a flaw that allows ...

PT-2026-97097

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper authorization in the software allows a remote authenticated attacker to bypass security controls by forging user identities...

PT-2026-97072

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper authorization allows a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service...

PT-2026-97087

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information. Recommendations At the moment, there is no...

PT-2026-97085

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper path canonicalization allows a remote attacker to read arbitrary files. Path canonicalization is the process of converting a file...

CVE-2026-17636: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity...

PT-2026-97101

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote authenticated attackers can obtain sensitive information due to improper validation of symbolic links. Symbolic links are shortcuts o...