CVE-2026-18162

Critical9.8 Published on Sep 23, 2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-94

Vendorsredhat, ibm

Affected products

Vendors	Product	Versions
ibm	financial transaction manager	< 4.0.11.0
redhat	openshift	-

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle