{"api_version":"1","generated_at":"2026-11-09T15:51:05+00:00","cve":"CVE-2026-14434","urls":{"html":"https://cve.report/CVE-2026-14434","api":"https://cve.report/api/cve/CVE-2026-14434.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-14434","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-14434"},"summary":{"title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability","description":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.","state":"PUBLISHED","assigner":"ibm","published_at":"2026-11-08 18:17:01","updated_at":"2026-11-09 15:17:19"},"problem_types":["CWE-295","CWE-295 CWE-295 Improper Certificate Validation"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Secondary","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7290680","name":"https://www.ibm.com/support/pages/node/7290680","refsource":"psirt@us.ibm.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14434","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14434","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Turbonomic kubeturbo agent","version":"affected 8.16.0 8.21.2 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.21.3Follow the  kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4  from the IBM Turbonomic documentation","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"@im_rootkid","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-14434","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T14:13:18.922592Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-09T14:13:34.579Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.21.2:*:*:*:*:*:*:*"],"product":"Turbonomic kubeturbo agent","vendor":"IBM","versions":[{"lessThanOrEqual":"8.21.2","status":"affected","version":"8.16.0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"@im_rootkid"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>"}],"value":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-08T17:21:07.567Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7290680"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p><strong>IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range </strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td>IBM Turbonomic kubeturbo agent</td><td>8.21.3</td><td>Follow the <a href=\"https://www.ibm.com/docs/en/tarm/8.20.4?topic=configuration-container-platform-targets\" rel=\"nofollow\">kubeturbo installation instructions</a> from the IBM Turbonomic documentation </td></tr></tbody></table></div><p></p><p></p>"}],"value":"IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.21.3Follow the  kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4  from the IBM Turbonomic documentation"}],"title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability"}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-14434","datePublished":"2026-11-08T17:21:07.567Z","dateReserved":"2026-07-01T21:51:41.884Z","dateUpdated":"2026-11-09T14:13:34.579Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-08 18:17:01","lastModifiedDate":"2026-11-09 15:17:19","problem_types":["CWE-295","CWE-295 CWE-295 Improper Certificate Validation"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-09T14:13:18.922592Z","id":"CVE-2026-14434","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"14434","Ordinal":"1","Title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Applicatio","CVE":"CVE-2026-14434","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"14434","Ordinal":"1","NoteData":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.","Type":"Description","Title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Applicatio"}]}}}