Loading vulnerability…
IBM Financial Transaction Manager Unsafe Reflection Denial of Service
CVE-2026-18123 is an unsafe reflection vulnerability in IBM Financial Transaction Manager (FTM) for Red Hat OpenShift. The product improperly uses reflection with externally controlled input, allowing remotely supplied input to influence reflective operations and cause a denial of service. Affected versions include FTM 4.0.6.0 through 4.0.10.0, including specified 4.0.6.0 iFix6 builds.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A remote attacker can cause denial of service, affecting the availability of the FTM deployment or vulnerable service component.
Patch, then assume compromise.
Upgrade IBM Financial Transaction Manager for Red Hat OpenShift to version 4.0.11.0, which resolves this vulnerability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.