https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-19267.htmlhttps://patchthecve.com/cve/CVE-2026-19267.htmlWed, 07 Oct 2026 13:02:57 +0000MEDIUM 6.2: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management funchttps://patchthecve.com/cve/CVE-2026-19179.htmlhttps://patchthecve.com/cve/CVE-2026-19179.htmlWed, 07 Oct 2026 13:03:01 +0000HIGH 8.2: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.https://patchthecve.com/cve/CVE-2026-19087.htmlhttps://patchthecve.com/cve/CVE-2026-19087.htmlWed, 07 Oct 2026 13:03:04 +0000MEDIUM 4.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.https://patchthecve.com/cve/CVE-2026-18875.htmlhttps://patchthecve.com/cve/CVE-2026-18875.htmlWed, 07 Oct 2026 13:03:07 +0000HIGH 7.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steerhttps://patchthecve.com/cve/CVE-2026-18872.htmlhttps://patchthecve.com/cve/CVE-2026-18872.htmlWed, 07 Oct 2026 13:03:10 +0000CRITICAL 9.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in authehttps://patchthecve.com/cve/CVE-2026-18505.htmlhttps://patchthecve.com/cve/CVE-2026-18505.htmlWed, 07 Oct 2026 13:03:16 +0000MEDIUM 5.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter` (`HostHeaderFilter.java:151`). An unauthenticated attacker can craft a request with a manipulated `Host` header to redirect authenticated operators to attacker-controlled sites, https://patchthecve.com/cve/CVE-2026-18490.htmlhttps://patchthecve.com/cve/CVE-2026-18490.htmlWed, 07 Oct 2026 13:03:40 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint (BrmRMISSLServerSocketFactory.java:95, EP8). An adjacent-network attacker can deliver a crafted sehttps://patchthecve.com/cve/CVE-2026-18185.htmlhttps://patchthecve.com/cve/CVE-2026-18185.htmlWed, 07 Oct 2026 13:03:42 +0000HIGH 7.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function.https://patchthecve.com/cve/CVE-2026-18184.htmlhttps://patchthecve.com/cve/CVE-2026-18184.htmlWed, 07 Oct 2026 13:03:45 +0000HIGH 7.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.https://patchthecve.com/cve/CVE-2026-18181.htmlhttps://patchthecve.com/cve/CVE-2026-18181.htmlWed, 07 Oct 2026 13:03:47 +0000HIGH 8.1: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.https://patchthecve.com/cve/CVE-2026-18180.htmlhttps://patchthecve.com/cve/CVE-2026-18180.htmlWed, 07 Oct 2026 13:03:50 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.https://patchthecve.com/cve/CVE-2026-18179.htmlhttps://patchthecve.com/cve/CVE-2026-18179.htmlWed, 07 Oct 2026 13:03:53 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization.https://patchthecve.com/cve/CVE-2026-18177.htmlhttps://patchthecve.com/cve/CVE-2026-18177.htmlWed, 07 Oct 2026 13:03:55 +0000HIGH 7.1: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks.https://patchthecve.com/cve/CVE-2026-18176.htmlhttps://patchthecve.com/cve/CVE-2026-18176.htmlWed, 07 Oct 2026 13:04:36 +0000HIGH 7.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.https://patchthecve.com/cve/CVE-2026-18173.htmlhttps://patchthecve.com/cve/CVE-2026-18173.htmlWed, 07 Oct 2026 13:04:33 +0000LOW 3.7: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.https://patchthecve.com/cve/CVE-2026-18172.htmlhttps://patchthecve.com/cve/CVE-2026-18172.htmlWed, 07 Oct 2026 13:04:30 +0000HIGH 7.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.https://patchthecve.com/cve/CVE-2026-18170.htmlhttps://patchthecve.com/cve/CVE-2026-18170.htmlTue, 06 Oct 2026 21:01:21 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.https://patchthecve.com/cve/CVE-2026-18169.htmlhttps://patchthecve.com/cve/CVE-2026-18169.htmlTue, 06 Oct 2026 21:04:29 +0000CRITICAL 9.9: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.https://patchthecve.com/cve/CVE-2026-18163.htmlhttps://patchthecve.com/cve/CVE-2026-18163.htmlTue, 06 Oct 2026 21:04:48 +0000CRITICAL 9.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data.https://patchthecve.com/cve/CVE-2026-18162.htmlhttps://patchthecve.com/cve/CVE-2026-18162.htmlTue, 06 Oct 2026 21:05:30 +0000CRITICAL 9.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor.https://patchthecve.com/cve/CVE-2026-18161.htmlhttps://patchthecve.com/cve/CVE-2026-18161.htmlTue, 06 Oct 2026 21:06:42 +0000MEDIUM 4.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.https://patchthecve.com/cve/CVE-2026-18156.htmlhttps://patchthecve.com/cve/CVE-2026-18156.htmlThu, 08 Oct 2026 15:09:02 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.https://patchthecve.com/cve/CVE-2026-18154.htmlhttps://patchthecve.com/cve/CVE-2026-18154.htmlThu, 08 Oct 2026 15:06:50 +0000HIGH 8.0: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptographic key.https://patchthecve.com/cve/CVE-2026-18153.htmlhttps://patchthecve.com/cve/CVE-2026-18153.htmlThu, 08 Oct 2026 15:02:24 +0000MEDIUM 5.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors.https://patchthecve.com/cve/CVE-2026-18152.htmlhttps://patchthecve.com/cve/CVE-2026-18152.htmlThu, 08 Oct 2026 14:58:48 +0000HIGH 7.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures.https://patchthecve.com/cve/CVE-2026-18137.htmlhttps://patchthecve.com/cve/CVE-2026-18137.htmlWed, 07 Oct 2026 13:04:25 +0000HIGH 8.1: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.https://patchthecve.com/cve/CVE-2026-18134.htmlhttps://patchthecve.com/cve/CVE-2026-18134.htmlWed, 07 Oct 2026 15:38:24 +0000HIGH 7.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.https://patchthecve.com/cve/CVE-2026-18133.htmlhttps://patchthecve.com/cve/CVE-2026-18133.htmlWed, 07 Oct 2026 15:51:50 +0000MEDIUM 5.4: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.https://patchthecve.com/cve/CVE-2026-18132.htmlhttps://patchthecve.com/cve/CVE-2026-18132.htmlWed, 07 Oct 2026 15:53:10 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.https://patchthecve.com/cve/CVE-2026-18131.htmlhttps://patchthecve.com/cve/CVE-2026-18131.htmlWed, 07 Oct 2026 15:59:07 +0000HIGH 8.2: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.https://patchthecve.com/cve/CVE-2026-18124.htmlhttps://patchthecve.com/cve/CVE-2026-18124.htmlWed, 07 Oct 2026 16:30:36 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.https://patchthecve.com/cve/CVE-2026-18123.htmlhttps://patchthecve.com/cve/CVE-2026-18123.htmlWed, 07 Oct 2026 16:31:30 +0000HIGH 7.6: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.https://patchthecve.com/cve/CVE-2026-18114.htmlhttps://patchthecve.com/cve/CVE-2026-18114.htmlWed, 07 Oct 2026 16:39:17 +0000MEDIUM 6.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.https://patchthecve.com/cve/CVE-2026-18095.htmlhttps://patchthecve.com/cve/CVE-2026-18095.htmlWed, 07 Oct 2026 16:44:01 +0000HIGH 8.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-18074.htmlhttps://patchthecve.com/cve/CVE-2026-18074.htmlWed, 07 Oct 2026 16:48:15 +0000HIGH 8.2: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.https://patchthecve.com/cve/CVE-2026-18066.htmlhttps://patchthecve.com/cve/CVE-2026-18066.htmlThu, 08 Oct 2026 13:06:52 +0000HIGH 7.9: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.https://patchthecve.com/cve/CVE-2026-17647.htmlhttps://patchthecve.com/cve/CVE-2026-17647.htmlThu, 08 Oct 2026 13:07:49 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.https://patchthecve.com/cve/CVE-2026-17646.htmlhttps://patchthecve.com/cve/CVE-2026-17646.htmlThu, 08 Oct 2026 13:12:46 +0000HIGH 8.5: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references.https://patchthecve.com/cve/CVE-2026-17645.htmlhttps://patchthecve.com/cve/CVE-2026-17645.htmlThu, 08 Oct 2026 13:28:04 +0000CRITICAL 9.1: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.https://patchthecve.com/cve/CVE-2026-17644.htmlhttps://patchthecve.com/cve/CVE-2026-17644.htmlThu, 08 Oct 2026 13:35:03 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.https://patchthecve.com/cve/CVE-2026-17643.htmlhttps://patchthecve.com/cve/CVE-2026-17643.htmlThu, 08 Oct 2026 13:37:05 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.https://patchthecve.com/cve/CVE-2026-17637.htmlhttps://patchthecve.com/cve/CVE-2026-17637.htmlThu, 08 Oct 2026 13:39:41 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.https://patchthecve.com/cve/CVE-2026-17636.htmlhttps://patchthecve.com/cve/CVE-2026-17636.htmlThu, 08 Oct 2026 13:46:08 +0000HIGH 8.8: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.https://patchthecve.com/cve/CVE-2026-17635.htmlhttps://patchthecve.com/cve/CVE-2026-17635.htmlThu, 08 Oct 2026 13:46:58 +0000CRITICAL 9.1: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.https://patchthecve.com/cve/CVE-2026-17620.htmlhttps://patchthecve.com/cve/CVE-2026-17620.htmlThu, 15 Oct 2026 15:09:32 +0000MEDIUM 5.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel thahttps://patchthecve.com/cve/CVE-2026-17618.htmlhttps://patchthecve.com/cve/CVE-2026-17618.htmlThu, 15 Oct 2026 15:08:13 +0000HIGH 7.3: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.