CVE-2026-18074 HIGH

CVE-2026-18074: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Vendor Ibm
Product Financial Transaction Manager (FTM) for RedHat OpenShift
Weakness CWE-287 · Improper authentication
Published September 22, 2026
Last update September 22, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.

Key dates

02Disclosure timeline

September 22, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2026-8994 Login with NEAR <= 0.3.3 - Authentication Bypass via 'account' Parameter CVE-2024-12287 Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user CVE-2025-25227 [20250402] - Joomla Core - MFA Authentication Bypass CVE-2026-12598 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback CVE-2026-4021 Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion