widely-deployed-product-advisoryfinancial-sector-threatcloud-service-vulnerabilityidentity-authentication-vulnerability

Critical Flaws in IBM Financial Transaction Manager for OpenShift Require Upgrade

Patch & Detection Intelligence · 22 sources · Updated 1mo ago · First seen Sep 21, 2026

IBM disclosed numerous vulnerabilities in Financial Transaction Manager (FTM) for Red Hat OpenShift, affecting releases 4.0.6.0 through 4.0.10.0, including specified 4.0.6.0 iFix6 builds. The flaws include unauthenticated remote code execution, code and SQL/ESQL injection, insecure deserialization, authentication and authorization failures, stored cross-site scripting, XXE, buffer overflows, hard-coded credentials and cryptographic keys, privilege-management defects, and transaction-payment manipulation. The highest-rated issues include CVE-2026-18169 (CVSS 9.9), CVE-2026-18162 and CVE-2026-18163 (CVSS 9.8), CVE-2026-18872 (CVSS 9.3), and CVE-2026-17635 and CVE-2026-17645 (CVSS 9.1).

Notable exposure includes unauthenticated remote code execution through user-controlled input passed to the JavaScript Function constructor in CVE-2026-18162, unauthenticated SQL/ESQL command execution in CVE-2026-18137, and unauthorized remote actions caused by improper authentication in CVE-2026-18074. Other defects could enable code execution, disclosure or modification of sensitive transaction data, and privilege escalation. IBM advises affected organizations to upgrade to FTM 4.0.11.0; no alternative workaround or mitigation was provided. Administrators should prioritize patching internet-accessible and transaction-processing deployments, review access controls, and assess for suspicious activity associated with exposed FTM instances.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

8 events · Sep 18, 2026 – Sep 23, 2026

Sep 23, 20262mo ago
IBM adds CVE-2026-18872 stored XSS vulnerability record
IBM added CVE-2026-18872 and a reference to its FTM support advisory. The stored cross-site scripting flaw in the FTM UI NetworkAcknowledgement component could execute attacker-supplied scripts in authenticated operators' browsers, enabling session hijacking and unauthorized operator-level payment actions.
CVE-2026-18872 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-18490 PayDir deserialization RCE record
IBM PSIRT received CVE-2026-18490 for IBM Financial Transaction Manager for Red Hat OpenShift. The unsafe Java deserialization flaw in the PayDir Business Rules Manager RMI SSL endpoint could allow an unauthenticated adjacent-network attacker to execute arbitrary code, expose PayDir credentials, and alter payment business rules.
CVE-2026-18490 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-19179 SQL injection vulnerability record
IBM PSIRT received CVE-2026-19179 for Financial Transaction Manager for Red Hat OpenShift. The CWE-74 flaw could let an unauthenticated remote attacker manipulate database queries, with high integrity and low availability impact; it is referenced in IBM support document 7288641.
CVE-2026-19179 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-18181 hard-coded-key vulnerability record
IBM Product Security Incident Response Team received CVE-2026-18181, an IBM Financial Transaction Manager for Red Hat OpenShift vulnerability involving a hard-coded cryptographic key. The flaw could allow an adjacent-network attacker without privileges to bypass authentication and access sensitive information.
CVE-2026-18181 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 22, 20262mo ago
CVE records document additional FTM vulnerability details
IBM PSIRT received or published CVE records for multiple FTM for Red Hat OpenShift flaws, including critical CVE-2026-18169 symbolic-link validation and CVE-2026-18162 code-injection RCE issues, plus SQL/ESQL injection, XSS, deserialization, credential, authentication, privilege-management, XXE, buffer-overflow, and cryptographic-key weaknesses. The records describe impacts ranging from information disclosure and unauthorized actions to arbitrary code execution and elevated privileges.
CVE-2026-17643 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 21, 20262mo ago
Canadian Cyber Centre publishes IBM advisory AV26-943
The Canadian Centre for Cyber Security published advisory AV26-943 covering vulnerabilities affecting multiple IBM product lines. It directed administrators to review IBM PSIRT guidance and apply the required vendor updates.
IBM security advisory (AV26-943) - Malware News - Malware Analysis, News and Indicators
Sep 21, 20262mo ago
IBM issues FTM bulletin and releases fixed version 4.0.11.0
IBM published Security Bulletin 7288641 covering numerous vulnerabilities in Financial Transaction Manager for Red Hat OpenShift versions 4.0.6.0 through 4.0.10.0. IBM advised upgrading to FTM 4.0.11.0, stating that no workaround or mitigation was available other than applying the fixed release.
Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 18, 20262mo ago
Multiple IBM products reported affected by vulnerabilities
Multiple IBM products were reported as affected by vulnerabilities, including CICS TX Advanced, Guardium Data Protection, IBM MQ, Sterling File Gateway, WebSphere Application Server, IBM i, Spectrum LSF, and IBM Platform RTM.
IBM security advisory (AV26-943) - Malware News - Malware Analysis, News and Indicators

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.

Open in app →

Vulnerabilities

47 linked

Affected products

1 linked

Financial Transaction Manager For Red Hat Openshift

Observables

1 linked

Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

22 references tracked. Mallory keeps watching after this page renders.

Cvefeed High SeverityAdvisories · Sep 23, 2026

CVE-2026-19179 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesOpen source ↗

Cvefeed High SeverityAdvisories · Sep 23, 2026

CVE-2026-18490 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesOpen source ↗

Cvefeed High SeverityAdvisories · Sep 23, 2026

CVE-2026-18872 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesOpen source ↗

Cvefeed High SeverityAdvisories · Sep 23, 2026

CVE-2026-18181 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesOpen source ↗

14 additional sources from 22-09-2026 to 23-09-2026

Malware NewsNews · Sep 21, 2026

IBM security advisory (AV26-943) - Malware News - Malware Analysis, News and IndicatorsOpen source ↗

Ca CcsNews · Sep 21, 2026

IBM security advisory (AV26-943) - Canadian Centre for Cyber SecurityOpen source ↗

Ibm SupportNews · Sep 21, 2026

Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesOpen source ↗

Cwe MitreNews · Feb 21, 2013

CWE - CWE-295: Improper Certificate Validation (4.20)Open source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

widely-deployed-product-advisoryfinancial-sector-threatcloud-service-vulnerabilityidentity-authentication-vulnerability

Critical Flaws in IBM Financial Transaction Manager for OpenShift Require Upgrade

Patch & Detection Intelligence · 22 sources · Updated 1mo ago · First seen Sep 21, 2026

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

8 events · Sep 18, 2026 – Sep 23, 2026

Sep 23, 20262mo ago
IBM adds CVE-2026-18872 stored XSS vulnerability record
IBM added CVE-2026-18872 and a reference to its FTM support advisory. The stored cross-site scripting flaw in the FTM UI NetworkAcknowledgement component could execute attacker-supplied scripts in authenticated operators' browsers, enabling session hijacking and unauthorized operator-level payment actions.
CVE-2026-18872 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-18490 PayDir deserialization RCE record
IBM PSIRT received CVE-2026-18490 for IBM Financial Transaction Manager for Red Hat OpenShift. The unsafe Java deserialization flaw in the PayDir Business Rules Manager RMI SSL endpoint could allow an unauthenticated adjacent-network attacker to execute arbitrary code, expose PayDir credentials, and alter payment business rules.
CVE-2026-18490 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-19179 SQL injection vulnerability record
IBM PSIRT received CVE-2026-19179 for Financial Transaction Manager for Red Hat OpenShift. The CWE-74 flaw could let an unauthenticated remote attacker manipulate database queries, with high integrity and low availability impact; it is referenced in IBM support document 7288641.
CVE-2026-19179 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 23, 20262mo ago
IBM PSIRT receives CVE-2026-18181 hard-coded-key vulnerability record
IBM Product Security Incident Response Team received CVE-2026-18181, an IBM Financial Transaction Manager for Red Hat OpenShift vulnerability involving a hard-coded cryptographic key. The flaw could allow an adjacent-network attacker without privileges to bypass authentication and access sensitive information.
CVE-2026-18181 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 22, 20262mo ago
CVE records document additional FTM vulnerability details
IBM PSIRT received or published CVE records for multiple FTM for Red Hat OpenShift flaws, including critical CVE-2026-18169 symbolic-link validation and CVE-2026-18162 code-injection RCE issues, plus SQL/ESQL injection, XSS, deserialization, credential, authentication, privilege-management, XXE, buffer-overflow, and cryptographic-key weaknesses. The records describe impacts ranging from information disclosure and unauthorized actions to arbitrary code execution and elevated privileges.
CVE-2026-17643 - IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 21, 20262mo ago
Canadian Cyber Centre publishes IBM advisory AV26-943
The Canadian Centre for Cyber Security published advisory AV26-943 covering vulnerabilities affecting multiple IBM product lines. It directed administrators to review IBM PSIRT guidance and apply the required vendor updates.
IBM security advisory (AV26-943) - Malware News - Malware Analysis, News and Indicators
Sep 21, 20262mo ago
IBM issues FTM bulletin and releases fixed version 4.0.11.0
IBM published Security Bulletin 7288641 covering numerous vulnerabilities in Financial Transaction Manager for Red Hat OpenShift versions 4.0.6.0 through 4.0.10.0. IBM advised upgrading to FTM 4.0.11.0, stating that no workaround or mitigation was available other than applying the fixed release.
Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Sep 18, 20262mo ago
Multiple IBM products reported affected by vulnerabilities
Multiple IBM products were reported as affected by vulnerabilities, including CICS TX Advanced, Guardium Data Protection, IBM MQ, Sterling File Gateway, WebSphere Application Server, IBM i, Spectrum LSF, and IBM Platform RTM.
IBM security advisory (AV26-943) - Malware News - Malware Analysis, News and Indicators

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.

Open in app →