CVE-2026-18124: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Q: Who could exploit this issue?

A local attacker with access to the affected IBM Financial Transaction Manager for RedHat OpenShift environment could potentially obtain sensitive information.

Q: What is the underlying condition that enables exposure?

The issue is caused by insufficient protection of credentials, which may allow sensitive information to be obtained by a local attacker.

Published Sep 21, 2026

Updated

IBM Financial Transaction Manager (FTM) could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

Other sources

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

— MITRE

Affected Software

1 affected component

IBM Financial Transaction Manager (FTM) for RedHat OpenShift<=4.0.6.0 - 4.0.6.0 iFix6 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800) 4.0.7.0 4.0.8.0 4.0.9.0 4.0.10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Financial Transaction Manager (FTM) for RedHat OpenShift to a version that resolves this vulnerability.
Fixed in 4.0.11.0

Event History

Sep 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 22, 2026

CVE Published

via MITRE·09:47 PM

Data Sourced

via MITRE·09:47 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288641

Frequently Asked Questions

Who could exploit this issue?