CVE-2026-19179 is a vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift where improper neutralization of special elements in a boolean expression allows remote attackers to manipulate database queries. This is classified under CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component, commonly known as Injection). The vulnerability affects versions >=4.0.6.0 and <=4.0.10.0. The CVSS 3.1 score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

An attacker could remotely manipulate database queries, potentially leading to unauthorized modification of data (integrity impact). There is no reported impact on confidentiality, and availability impact is low. This could affect the reliability and correctness of financial transaction data processed by the affected software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IBM's advisories for updates. Until a fix is available, consider restricting network access to the affected service to trusted sources to reduce exposure.