CVE-2026-17643: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Q: What level of access does an attacker need to exploit this issue?

The issue is described as exploitable by a local attacker. The provided information does not indicate that it can be exploited remotely without local access.

Q: Which deployment is identified as affected?

The affected software is IBM Financial Transaction Manager for Red Hat OpenShift.

Published Sep 21, 2026

Updated

IBM Financial Transaction Manager (FTM) could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

Other sources

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

— MITRE

Affected Software

1 affected component

IBM Financial Transaction Manager (FTM) for RedHat OpenShift<=4.0.6.0 - 4.0.6.0 iFix6 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800) 4.0.7.0 4.0.8.0 4.0.9.0 4.0.10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Financial Transaction Manager (FTM) for Red Hat OpenShift to a version that resolves this vulnerability.
Fixed in 4.0.11.0

Event History

Sep 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 22, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288641

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?