CVE-2026-19087: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
Published Sep 21, 2026
·Updated
IBM Financial Transaction Manager (FTM) could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.
Other sources
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.
— MITRE
Affected Software
10 affected components
IBM Financial Transaction Manager (FTM) for RedHat OpenShift<=4.0.6.0 - 4.0.6.0 iFix6
4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800)
4.0.7.0
4.0.8.0
4.0.9.0
4.0.10.0
All of the following
Any of the following
IBM Financial Transaction Manager>=4.0.7.0<4.0.11.0
IBM Financial Transaction Manager=4.0.6.0
IBM Financial Transaction Manager=4.0.6.0-interim_fix_1
IBM Financial Transaction Manager=4.0.6.0-interim_fix_2
IBM Financial Transaction Manager=4.0.6.0-interim_fix_3
IBM Financial Transaction Manager=4.0.6.0-interim_fix_4
IBM Financial Transaction Manager=4.0.6.0-interim_fix_5
IBM Financial Transaction Manager=4.0.6.0-interim_fix_6
redhat Openshift
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Financial Transaction Manager (FTM) for Red Hat OpenShiftto a version that resolves this vulnerability.Fixed in 4.0.11.0
Event History
Sep 21, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 23, 2026
CVE Published
via MITRE·03:48 PM
Data Sourced
via MITRE·03:48 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which deployment is identified as affected?
The affected software is IBM Financial Transaction Manager (FTM) for RedHat OpenShift.