CVE-2026-18154 identifies a security vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 where a hard-coded or predictable cryptographic key is used. This cryptographic weakness could be exploited remotely to gain unauthorized access to sensitive information. The CVSS 3.1 base score is 8.0, indicating high severity, with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability.

The use of a hard-coded cryptographic key compromises the confidentiality and integrity of sensitive information processed by the affected software. A remote attacker could exploit this vulnerability to obtain sensitive data, potentially leading to data breaches or unauthorized data manipulation. There is no indication of impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided. Until a patch is available, consider restricting network access to the affected component and monitoring for unusual activity related to cryptographic operations.