Login Request a demo
High severity · published Sep 23, 2026
CVE-2026-18490
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint (BrmRMISSLServerSocketFactory.java:95, EP8). An adjacent-network attacker can deliver a crafted serialized payload to achieve arbitrary code execution, exposing all PayDir credentials and enabling manipulation of payment business rules.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
Financial Transaction Manager (FTM) for RedHat OpenShift · IBM
4.0.6.0 through 4.0.10.0 · source: vendor
FT
Financial Transaction Manager · Ibm
4.0.7.0 before 4.0.11.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; 4.0.6.0; +2 more · source: NVD
Affected product
FT
Financial Transaction Manager (FTM) for RedHat OpenShift
IBM
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18490
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18490
Vendor Advisory
https://www.ibm.com/support/pages/node/7288641
More from Financial Transaction Manager (FTM) for RedHat OpenShift
9.9
CVE-2026-18169
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18163
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-18162
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.8
CVE-2026-17618
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
9.3
CVE-2026-18872
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities