CVE-2022-42003

jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Debian Fasterxml Netapp and 2 more

Products

Debian Linux Jackson-databind Oncommand Workflow Automation and 20 more

CVE-2026-18074

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18095

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18114

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18123

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18124

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18131

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutralization of HTML input.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18132

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18133

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18134

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-87114

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's workstation. If the Docker daemon requires elevated privileges, the untrusted code may execute with root-mediated daemon privileges, posing a significant security risk.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift Openshift Container Platform Pdrive Lightspeed and 1 more

CVE-2026-18176

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18173

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18172

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18137

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18177

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18179

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18180

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18181

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift

CVE-2026-18184

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Ibm Redhat

Products

Financial Transaction Manager Financial Transaction Manager Ftmfor Redhat Openshift Openshift