Critical RCE Vulnerability in SWIFT Middleware Discovered

• •CVE-2026-18397 is a critical RCE vulnerability affecting SWIFT middleware.
• •Attackers can bypass multi-factor authentication and gain privileged access remotely.
• •No public breaches have been reported, but immediate patching is essential.

A critical remote code execution (RCE) vulnerability, CVE-2026-18397, has been identified in middleware components used by SWIFT banking systems and government authentication portals. This flaw allows attackers to bypass multi-factor authentication (MFA) and gain privileged access to sensitive environments. The vulnerability stems from a cryptographic implementation flaw that permits oversized signatures and stale memory reads, enabling the injection of malicious DLLs. Attackers can exploit this vulnerability remotely, achieving complete compromise of the authentication layer in as little as six seconds. While no public breaches have been reported, the ease of exploitation and the critical nature of affected systems make it a high-priority risk. Immediate patching is recommended to mitigate potential threats. The vulnerability is currently not listed as exploited in the CISA KEV catalog.