VYPR
← All advisories
Medium severity6.2NVD Advisory· Published Sep 23, 2026· Updated Oct 7, 2026

CVE-2026-19267

CVE-2026-19267

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (CommandsResource.java:31). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Financial Transaction Manager8 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*+ 7 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:-:*:*range: >=4.0.7.0,<4.0.11.0
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:-:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_1:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_2:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_3:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_4:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_5:*:*:*:-:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:4.0.6.0:interim_fix_6:*:*:*:-:*:*
  • IBM/Financial Transaction Manager for RedHat OpenShiftllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.