Loading vulnerability…
Improper Privilege Management in IBM Financial Transaction Manager for Red Hat OpenShift
CVE-2026-17645 is an improper privilege-management vulnerability in IBM Financial Transaction Manager (FTM) for Red Hat OpenShift. A remote authenticated attacker with high privileges can exploit insufficient privilege management to obtain elevated privileges. The issue affects FTM releases 4.0.6.0 through 4.0.10.0, including specified 4.0.6.0 iFix6 builds.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation enables privilege escalation across a changed security scope. It can have high impact on confidentiality, integrity, and availability, enabling the attacker to access protected information, perform unauthorized modifications or actions, and potentially disrupt affected services.
If you can’t patch tonight, do this now.
No workaround or compensating mitigation is specified beyond applying the fixed FTM 4.0.11.0 release.
Patch, then assume compromise.
Upgrade IBM Financial Transaction Manager for Red Hat OpenShift to version 4.0.11.0, which resolves CVE-2026-17645.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.