CVE-2026-18161 describes a vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0. The flaw arises from improper validation of a client-supplied HTTP header, which allows a remote attacker with authentication privileges to falsify transaction audit logs. This insufficient logging weakness could impact the integrity of audit trails but does not affect confidentiality or availability.

The vulnerability allows a remote authenticated attacker to manipulate transaction audit logs, potentially undermining the reliability of audit records. There is no direct impact on confidentiality or availability as per the CVSS vector. The integrity of audit logs is compromised, which could affect forensic investigations or compliance auditing.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should monitor for suspicious activity related to audit log manipulation and restrict access to authenticated users with minimal privileges.