CVE-2026-18170 is a resource management vulnerability classified under CWE-770 in IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0. The issue arises from the allocation of resources without implementing limits or throttling mechanisms, enabling a remote attacker to trigger a denial of service by exhausting resources. The CVSS v3.1 base score is 6.5, reflecting a medium severity with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

An attacker with network access adjacent to the vulnerable system can cause a denial of service by exploiting the lack of resource allocation limits. This results in service unavailability but does not compromise data confidentiality or integrity. There are no known exploits in the wild at this time.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, consider limiting network exposure to trusted sources and monitor resource usage to detect potential abuse.