VYPR
← All advisories
High severity7.4NVD Advisory· Published Sep 22, 2026· Updated Oct 7, 2026

CVE-2026-18172

CVE-2026-18172

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Financial Transaction Manager9 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*+ 8 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*range: >=4.0.7.0,<4.0.11.0
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:-:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_1:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_2:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_3:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_4:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_5:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_6:*:*:*:-:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

1