Skip to content
Threat Feed
Subscribe

Tag

Financial-Services

3 briefs RSS
critical advisory

Security Misconfiguration in IBM Financial Transaction Manager for RedHat OpenShift

IBM Financial Transaction Manager for RedHat OpenShift is vulnerable to an improper configuration of HTTP method-based security constraints, allowing remote unauthenticated attackers to bypass access controls.

Financial Transaction Manager for RedHat OpenShift +2 web-vulnerability security-misconfiguration financial-services cve-2026-17635 cross-site-scripting cve-2026-18872 ai-security rag-poisoning +1
3t 1c updated
high advisory

CVE-2026-1989: Authorization Bypass in PAVO Pay through User-Controlled Key

CVE-2026-1989 describes a high-severity authorization bypass vulnerability affecting PAVO Financial Technology Solutions Inc.'s PAVO Pay, allowing attackers to exploit trusted identifiers via a user-controlled key to gain unauthorized access or escalate privileges within the system.

PAVO Pay authorization-bypass vulnerability financial-services web-application cve
3t 1c
critical threat

Qilin Ransomware Claims New Financial Services Victim

The Qilin ransomware group, known for its Golang-based ransomware and double extortion tactics, has claimed a new victim in the Financial Services sector, www.tqfinancials.com, as part of its ongoing campaign, highlighting the persistent threat of data encryption and exfiltration.

Qilin +1 ransomware double-extortion financial-services golang
2r 20t 60i