Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-18184 | high | 7.4 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML ext... | 2026-10-07 |
| CVE-2026-18185 | high | 7.3 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system... | 2026-10-07 |
| CVE-2026-18490 | high | 8.8 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserial... | 2026-10-07 |
| CVE-2026-18505 | medium | 5.4 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter` (`HostHeaderFilter... | 2026-10-07 |
| CVE-2026-18872 | critical | 9.3 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAckn... | 2026-10-07 |
| CVE-2026-18875 | high | 7.3 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in t... | 2026-10-07 |
| CVE-2026-19087 | medium | 4.4 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the contain... | 2026-10-07 |
| CVE-2026-19179 | high | 8.2 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper ne... | 2026-10-07 |
| CVE-2026-19267 | medium | 6.2 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands... | 2026-10-07 |
| CVE-2026-106033 | medium | 5.4 | No | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the applicat... | 2026-10-07 |
| CVE-2025-15359 | critical | 9.8 | No | DVP-12SE11T - Out-of-bound memory write Vulnerability | 2026-10-07 |
| CVE-2025-15243 | critical | 9.8 | No | A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a... | 2026-10-07 |
| CVE-2025-15103 | critical | 9.8 | No | DVP-12SE11T - Authentication Bypass via Partial Password Disclosure | 2026-10-07 |
| CVE-2025-15102 | critical | 9.8 | No | DVP-12SE11T - Password Protection Bypass | 2026-10-07 |
| CVE-2025-15212 | critical | 9.8 | No | A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /ho... | 2026-10-07 |
| CVE-2025-15211 | critical | 9.8 | No | A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Ex... | 2026-10-07 |
| CVE-2025-15210 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of t... | 2026-10-07 |
| CVE-2025-15209 | critical | 9.8 | No | A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.... | 2026-10-07 |
| CVE-2025-15208 | critical | 9.8 | No | A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionalit... | 2026-10-07 |
| CVE-2025-15207 | critical | 9.8 | No | A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products... | 2026-10-07 |