VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 23, 2026· Updated Oct 7, 2026

CVE-2026-18505

CVE-2026-18505

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP HostHeaderFilter (HostHeaderFilter.java:151). An unauthenticated attacker can craft a request with a manipulated Host header to redirect authenticated operators to attacker-controlled sites, enabling credential phishing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Financial Transaction Manager for RedHat OpenShiftllm-fuzzy
  • IBM/Financial Transaction Manager8 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*+ 7 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*range: >=4.0.7.0,<4.0.11.0
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:-:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_1:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_2:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_3:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_4:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_5:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_6:*:*:*:-:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.