CVE-2026-18074: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published Sep 21, 2026
·Updated
IBM Financial Transaction Manager (FTM) could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.
Other sources
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.
— MITRE
Affected Software
1 affected component
IBM Financial Transaction Manager (FTM) for RedHat OpenShift<=4.0.6.0 - 4.0.6.0 iFix6
4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800)
4.0.7.0
4.0.8.0
4.0.9.0
4.0.10.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Financial Transaction Manager (FTM) for RedHat OpenShiftto a version that resolves this vulnerability.Fixed in 4.0.11.0
Event History
Sep 21, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 22, 2026
CVE Published
via MITRE·09:45 PM
Data Sourced
via MITRE·09:45 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployment should be prioritized for review?
The affected software is identified as IBM Financial Transaction Manager (FTM) for RedHat OpenShift.
2
Are affected versions, configuration prerequisites, or temporary mitigations provided?
No affected version information, configuration details, or workaround guidance is included in the available data.