CVE-2026-19267 — IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

CVE-2026-19267

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities PUBLISHED

Description (CNA)

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.

Affected (CNA)

Vendor / product	Versions
IBM / Financial Transaction Manager (FTM) for RedHat OpenShift	affected 4.0.6.0 through 4.0.10.0

CWE

CWE-306

References

https://www.ibm.com/support/pages/node/7288641

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.