VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Sep 22, 2026· Updated Oct 6, 2026

CVE-2026-18161

CVE-2026-18161

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Financial Transaction Manager9 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*+ 8 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*range: >=4.0.7.0,<4.0.11.0
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:-:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_1:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_2:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_3:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_4:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_5:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_6:*:*:*:-:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

1