Skip to content
Sign in
5.9 Medium

CVE-2026-14435 IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability

Description

IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
High
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
Turbonomic kubeturbo agent 8.16 8.16.0 → 8.20.3 No fix stated

Other CVEs of Turbonomic kubeturbo agent

The 3 CVEs of Turbonomic kubeturbo agent →
CVE-2026-14434 IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability 5.9 Medium CVE-2026-14377 IBM Turbonomic kubeturbo agent, used by IBM Turbonomic Application Resource Management, is affected by a security vulnerability 5.4 Medium
Track this CVE