CVE-2026-14434

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-14434", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-01T21:51:41.884Z", "datePublished": "2026-11-08T17:21:07.567Z", "dateUpdated": "2026-11-09T14:13:34.579Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:21:07.567Z"}, "title": "IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Turbonomic kubeturbo agent", "versions": [{"status": "affected", "version": "8.16.0", "lessThanOrEqual": "8.21.2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.21.2:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7290680", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.21.3Follow the kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4 from the IBM Turbonomic documentation", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range\u00a0</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td>IBM Turbonomic kubeturbo agent</td><td>8.21.3</td><td>Follow the <a href=\"https://www.ibm.com/docs/en/tarm/8.20.4?topic=configuration-container-platform-targets\" rel=\"nofollow\">kubeturbo installation instructions</a> from the IBM Turbonomic documentation\u00a0</td></tr></tbody></table></div><p></p><p></p>"}]}], "credits": [{"lang": "en", "value": "@im_rootkid", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T14:13:18.922592Z", "id": "CVE-2026-14434", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T14:13:34.579Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability", "credits": [{"lang": "en", "type": "finder", "value": "@im_rootkid"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.21.2:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Turbonomic kubeturbo agent", "versions": [{"status": "affected", "version": "8.16.0", "versionType": "semver", "lessThanOrEqual": "8.21.2"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.21.3Follow the kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4 from the IBM Turbonomic documentation", "supportingMedia": [{"type": "text/html", "value": "<p><strong>IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range\u00a0</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td>IBM Turbonomic kubeturbo agent</td><td>8.21.3</td><td>Follow the <a href=\"https://www.ibm.com/docs/en/tarm/8.20.4?topic=configuration-container-platform-targets\" rel=\"nofollow\">kubeturbo installation instructions</a> from the IBM Turbonomic documentation\u00a0</td></tr></tbody></table></div><p></p><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7290680", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:21:07.567Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-14434", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T14:13:18.922592Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-11-09T14:13:30.099Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-14434", "state": "PUBLISHED", "dateUpdated": "2026-11-08T17:21:07.567Z", "dateReserved": "2026-07-01T21:51:41.884Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-11-08T17:21:07.567Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.21.2:*:*:*:*:*:*:*"], "product": "Turbonomic kubeturbo agent", "vendor": "IBM", "versions": [{"lessThanOrEqual": "8.21.2", "status": "affected", "version": "8.16.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."}], "id": "CVE-2026-14434", "lastModified": "2026-11-09T15:17:19.483", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14434", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T14:13:18.922592Z", "version": "2.0.3"}}]}, "published": "2026-11-08T18:17:01.727", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7290680"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.16.0,8.21.2]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Turbonomic kubeturbo agent", "source": "cna", "vendor": "IBM"}, "product": "turbonomic_kubeturbo_agent", "vendor": "ibm"}], "created": "2026-11-08T18:30:11.969911+00:00", "updated": "2026-11-09T16:38:08.031430+00:00", "vendors": ["ibm", "ibm$PRODUCT$turbonomic_kubeturbo_agent"]}