What is the CVSS score of EUVD-2026-84952?

EUVD-2026-84952 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.4%.

Is there a patch available for EUVD-2026-84952?

Yes, a patch is available for EUVD-2026-84952. Update the affected software to the latest version immediately.

IBM Financial Transaction Manager EUVD-2026-84952

| CVE-2026-18132 MEDIUM

Missing Authorization (CWE-862)

2026-09-22 ibm

GHSA-vw7m-cwrf-c3mv

Authentication Bypass IBM Red Hat Openshift Financial Transaction Manager Ftm For Redhat Openshift

6.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

vuln.today AI

6.5 MEDIUM

Authenticated (PR:L) network-reachable missing-authorization flaw; integrity-only high impact on payment data with no confidentiality or availability effect and no scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Metadata Corrected

Sep 22, 2026 - 23:40 vuln.today

tag: Openshift added

Analysis Generated

Sep 22, 2026 - 22:42 vuln.today

DescriptionCVE.org

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorization.

AnalysisAI

IBM Financial Transaction Manager (FTM) for Red Hat OpenShift ships with missing server-side authorization checks on payment-mutation functions, letting a low-privileged authenticated user invoke actions reserved for higher-privileged roles. The flaw is network-reachable and low-complexity (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, 6.5 Medium), with the damage confined to integrity - unauthorized modification or execution of payment transactions - and no confidentiality or availability impact. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires a valid authenticated FTM for RedHat OpenShift account (PR:L) with network access to the application; no user interaction and no special non-default configuration are indicated. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, 6.5 Medium) is internally consistent and I agree with it: a network-reachable, low-complexity flaw exploitable by an already-authenticated low-privilege user, with high integrity impact and no confidentiality or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the vendor fix for IBM Financial Transaction Manager for Red Hat OpenShift as documented in IBM's security bulletin at https://www.ibm.com/support/pages/node/7288641, which is listed as a patch reference; because the CPE does not pin a version, confirm the exact fixed release and upgrade level for your deployment in that advisory before validating. … Detailed patch versions, workarounds, and compensating controls in full report.