CVE-2026-18872

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager (FTM) for RedHat OpenShift (affected versions not specified)

Description Stored cross-site scripting occurs in the FTM UI NetworkAcknowledgement React component within the file NetworkAcknowledgement.jsx:42. A malicious actor can inject scripts into stored network acknowledgement data. When an authenticated operator views this data, the script executes in their browser, which can lead to session hijacking and unauthorized operator-level payment actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.