CVE-2026-18185 is a vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift where a critical function lacks authentication controls. This missing authentication enables remote attackers to gain unauthorized access to sensitive information and alter system configurations. The affected versions are >=4.0.6.0 and <=4.0.10.0. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) reflects network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability at a low level.

An unauthenticated remote attacker can exploit this vulnerability to access sensitive data and modify system configurations, potentially leading to information disclosure, unauthorized changes, and partial disruption of service. The impact affects confidentiality, integrity, and availability, but the severity is rated as high rather than critical.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected functions and monitor for unauthorized access attempts.