VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 22, 2026· Updated Oct 7, 2026

CVE-2026-18114

CVE-2026-18114

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Financial Transaction Manager8 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*+ 7 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*range: >=4.0.7.0,<4.0.11.0
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:-:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_1:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_2:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_3:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_4:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_5:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_6:*:*:*:-:*:*
  • IBM/Financial Transaction Manager for RedHat OpenShiftllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

1