Skip to content
Sign in
5.4 Medium

CVE-2026-14377 IBM Turbonomic kubeturbo agent, used by IBM Turbonomic Application Resource Management, is affected by a security vulnerability

Description

IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitable remotely over the network, with an ordinary account and without any user action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
Low
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Affected products and versions

Product Affected versions Fixed in
Turbonomic kubeturbo agent 8.16 8.16.0 → 8.21.2 No fix stated

Other CVEs of Turbonomic kubeturbo agent

The 3 CVEs of Turbonomic kubeturbo agent →
CVE-2026-14435 IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability 5.9 Medium CVE-2026-14434 IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability 5.9 Medium
Track this CVE