Is CVE-2026-18172 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18172?

CVE-2026-18172 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-18172

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.