CVE-2026-18137

High8.1 Published on Sep 22, 2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-89

Vendorsredhat, ibm

Affected products

Vendors	Product	Versions
ibm	financial transaction manager	< 4.0.11.0
redhat	openshift	-

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle