CVE-2026-18173

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18173 , which allows a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication . The vulnerability is categorized under CWE-295: Improper Certificate Validation . ...

CVE-2026-18172

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a remote attack where an adversary could obtain sensitive information. The root cause is the improper restriction of XML external entity references (CWE-611). Affected versions include 4.0.6.0 through 4.0.10.0 (specific...

CVE-2026-18169

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that allows a remote authenticated attacker to obtain sensitive information . The root cause is the improper validation of symbolic links . The vulnerability is assigned a CRITICAL base severity score ...

CVE-2026-18170

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to cause a denial of service . The root cause is the allocation of resources without limits or throttling . No specific exploit details or remediation instructions are pr...

CVE-2026-18163

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to achieve arbitrary code execution . The root cause is the improper deserialization of untrusted data . The vulnerability has a CRITICAL severity rating with a CVSS scor...

CVE-2026-18162

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to execute arbitrary code . The root cause is the improper neutralization of user-controlled input within the new Function constructor . The vulnerability has a CRITI...

CVE-2026-18161

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an issue where a remote authenticated attacker can falsify transaction audit logs . The root cause is the improper validation of a client-supplied HTTP header . No specific patch versions or exploit details are provided...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18156 , where a remote authenticated attacker could bypass security controls by forging user identities due to improper authorization (CWE-862 ). The vulnerability has a CVSS base score of 6.5 . Affected versions...

CVE-2026-18154

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to the use of a hard-coded or predictable cryptographic key (CWE-321 ). This flaw could allow a remote attacker to obtain sensitive information. The vulnerability affects FTM versions 4.0.6.0 through 4.0.10.0 (specifically...

CVE-2026-18153

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw where a remote authenticated attacker can obtain sensitive information and forge authentication tags . This issue is caused by the use of hard-coded cryptographic keys and initialization vectors (CWE-327). The vu...

CVE-2026-18152

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw where a remote attacker can forge validly-signed messages . This issue stems from the improper verification of cryptographic signatures . The vulnerability has a CVSS 3.1 base score of 7.4 (HIGH) , with an integr...

CVE-2026-18137

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw that could allow a remote attacker to execute arbitrary ESQL commands . The root cause is the improper neutralization of special elements used in an ESQL command. The vulnerability has a HIGH base severity (CVSS ...

CVE-2026-18134

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw that could allow a remote attacker to obtain sensitive information . This issue stems from the cleartext transmission of sensitive data. No specific affected versions, internal components, or remediation deta...

CVE-2026-95819

A SQL injection vulnerability exists in the login.php file of anirbandutta9 College-Notes-Gallery (up to commit 8c1cf3d98f30982d069c88ca172612c001eb39f6). The root cause is the improper handling of the user/pass arguments, allowing for remote manipulation. The exploit has been disclosed to the pu...

CVE-2026-18133

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a path traversal flaw (CWE-22 ). This vulnerability could allow a remote authenticated attacker to modify server files. The affected versions include 4.0.6.0 through 4.0.10.0 (specifically 4.0.6.0 iFix6, 4.0.6.0 iFix6 R...

CVE-2026-19202

The mcp-toolbox-sdk-python SDK contains a caching flaw within its toolbox-core package. The module-level token cache fails to uniquely key Google ID tokens by the requested audience. If an application authenticates to multiple audiences (e.g., Service A and Service B) within the same process, a v...

CVE-2026-18132

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that allows a remote authenticated attacker to perform unauthorized payment mutation actions . This flaw is caused by missing authorization checks within the system. The provided documents do not specify t...

CVE-2026-18131

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a cross-site scripting (XSS) flaw due to the improper neutralization of HTML input (CWE-79). This vulnerability could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser. The impac...

CVE-2026-18124

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where a local attacker can obtain sensitive information due to insufficiently protected credentials (CWE-522 ). This issue affects versions 4.0.6.0 through 4.0.10.0 (including specific iFix releases). The ...

CVE-2026-18123

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a denial of service (DoS) condition. The root cause is the improper use of reflection when processing externally controlled input , which is classified under CWE-470 . This vulnerability impacts versions 4.0.6.0 through...

CVE-2026-18114

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw that could allow a remote attacker to read arbitrary files . The root cause is identified as improper path canonicalization . While the vulnerability impacts confidentiality, no specific exploit information or re...

CVE-2026-18095

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is susceptible to a buffer overflow vulnerability. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution . While the impact is significant, specific details regarding the affected component or functio...

CVE-2026-18074

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to perform unauthorized actions . This security flaw stems from improper authentication and missing authorization within the software. The risk is characterized by an...

CVE-2026-18066

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to obtain sensitive information and trigger unauthorized actions. This is caused by server-side request forgery . No specific exploit details or remediation steps are prov...

CVE-2026-17647

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to execute arbitrary commands . This issue stems from the inclusion of functionality originating from an untrusted control sphere . The vulnerability is assigned a CVSS 3....

CVE-2026-17646

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability involving the improper restriction of XML external entity references . This flaw could allow a remote authenticated attacker to obtain sensitive information . No specific patch versions or exploit details ...

CVE-2026-17645

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management . The vulnerability has a CRITICAL base severity score of 9.1. No specific exploit details ...

CVE-2026-17644

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where the use of hard-coded credentials could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data . The vulnerability has a CVSS 3.1 base score of 8.8 (H...

CVE-2026-17643

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities. A local attacker could obtain sensitive information and perform unauthorized actions because of insufficiently protected credentials . Exploitation details and specific remediation steps are not ...

CVE-2026-17637

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities, including one that allows an adjacent-network attacker to execute arbitrary code . This flaw stems from the deserialization of untrusted data . The CVSS 3.1 score is 8.8 (High), indicating high i...

CVE-2026-17636

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote authenticated attacker to execute arbitrary code . The root cause is identified as the improper validation of a specified quantity . The CVSS 3.1 score is 8.8 (High) , indicating ...

CVE-2026-17635

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to perform unauthorized actions . This issue stems from an improper configuration of HTTP method-based security constraints . The vulnerability is assigned a CRITICAL sev...

CVE-2026-17620

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800), 4.0.7.0 , 4.0.8.0 , 4.0.9.0 , and 4.0.10.0 Interim Fix 064 is vulnerable to a security flaw where it transmits sensitive or security-critical data in c...

CVE-2026-17618

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by multiple vulnerabilities stemming from improper authorization . This flaw could allow a remote unauthenticated attacker to view and modify sensitive information or cause a denial of service . No specific patch versions or...

CVE-2026-17472

IBM Concert versions 1.0.0 through 3.0.0 are affected by multiple vulnerabilities where a remote authenticated attacker can access or modify unauthorized resources. This issue is caused by the use of wildcards in RBAC permission definitions . No specific exploit details or remediation instruction...

CVE-2026-17465

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to multiple issues that could allow a remote authenticated attacker to cause a denial of service . The root cause is the improper enforcement of storage limits . No specific exploits or remediation details are provided in the documents.

CVE-2026-17102

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an OS command injection vulnerability (CVE-2026-17102 ). A remote authenticated attacker could exploit this by taking advantage of the improper neutralization of special elements used in an OS command, potentially leading to the executi...

CVE-2026-16672

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to remote code execution. A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command . The CVSS v3.1 score is 8.8 (High) , indicating significant impact o...

CVE-2026-16469

The IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime is vulnerable to an issue where a remote authenticated attacker could execute arbitrary commands. This is caused by the improper neutralization of special elements used in an OS command . The CVSS 3.1 score is 8.8 (High) with a network at...

CVE-2026-16468

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to OS command injection , which could allow a remote authenticated attacker to execute arbitrary commands. The provided documents do not specify the exact component or function responsible for the injection, nor do they provide details on ...

CVE-2026-16426

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to server-side request forgery (SSRF) . This vulnerability allows an authenticated attacker to initiate unauthorized requests from the system, which may result in network enumeration or the facilitation of additional attacks. No specific rem...

CVE-2026-16346

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an OS command injection flaw (CWE-285 ). A remote authenticated attacker can execute arbitrary commands due to the improper neutralization of special elements used in an OS command. This vulnerability has a CRITICAL base severity score ...

CVE-2026-15915

IBM Concert versions 1.0.0 through 3.0.0 are susceptible to a vulnerability where a local attacker can obtain sensitive information . This is caused by the recursive copying of build context directories into container images. No specific remediation, exploit details, or in-the-wild exploitation r...

CVE-2025-12767

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a denial of service condition. A remote attacker can exploit this by providing a specially crafted regular expression that triggers excessive resource consumption . No specific remediation steps or exploit details are provided in the docu...

CVE-2025-36084

IBM Concert versions 1.0.0 through 3.0.0 are affected by multiple vulnerabilities involving the use of weaker than expected cryptographic algorithms . This weakness could allow an attacker to decrypt highly sensitive information . No specific exploit information or remediation details are provide...

CVE-2026-75101

An authorization bypass vulnerability exists in GitHub Enterprise Server (versions prior to 3.22) due to a repository name collision flaw. Access tokens for raw pull request diffs and patches were incorrectly scoped to the repository name and pull request number rather than a globally unique iden...

CVE-2026-77912

A stored cross-site scripting (XSS) vulnerability exists in GitHub Enterprise Server within the Markdown rendering pipeline . The flaw occurs because the pipeline rewrote quote characters in already-sanitized HTML without performing subsequent re-sanitization, allowing an authenticated attacker t...

CVE-2026-77987

A server-side request forgery (SSRF) vulnerability exists in the notebook viewer of GitHub Enterprise Server (versions 3.17 through 3.22). The root cause is the failure to validate the port of user-supplied URLs, despite validating the scheme and host. This allows requests to internal services on...

CVE-2026-88020

Autonomy Logic OpenPLC Runtime v3 is susceptible to an improper neutralization of input during web page generation vulnerability. This occurs because the web interface fails to encode a query string parameter used for program routing. Successful exploitation could allow an attacker to hijack sess...

CVE-2026-96260

The Mattermost server is vulnerable to a denial of service because it fails to enforce a request body size limit during CSRF validation of plugin requests. This flaw allows an authenticated user to exhaust server memory by sending a large request body to a plugin endpoint. Affected versions inclu...