{"api_version":"1","generated_at":"2026-11-09T16:02:51+00:00","cve":"CVE-2026-14435","urls":{"html":"https://cve.report/CVE-2026-14435","api":"https://cve.report/api/cve/CVE-2026-14435.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-14435","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-14435"},"summary":{"title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability","description":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.","state":"PUBLISHED","assigner":"ibm","published_at":"2026-11-08 18:17:01","updated_at":"2026-11-08 18:17:01"},"problem_types":["CWE-295","CWE-295 CWE-295 Improper Certificate Validation"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Primary","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7290683","name":"https://www.ibm.com/support/pages/node/7290683","refsource":"psirt@us.ibm.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14435","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14435","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Turbonomic kubeturbo agent","version":"affected 8.16.0 8.20.3 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.20.4Follow the  kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4  from the IBM Turbonomic documentation","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.20.3:*:*:*:*:*:*:*"],"product":"Turbonomic kubeturbo agent","vendor":"IBM","versions":[{"lessThanOrEqual":"8.20.3","status":"affected","version":"8.16.0","versionType":"semver"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>"}],"value":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-08T17:21:24.772Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7290683"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p><strong>IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range </strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td>IBM Turbonomic kubeturbo agent</td><td>8.20.4</td><td>Follow the <a href=\"https://www.ibm.com/docs/en/tarm/8.20.4?topic=configuration-container-platform-targets\" rel=\"nofollow\">kubeturbo installation instructions</a> from the IBM Turbonomic documentation </td></tr></tbody></table></div><p></p><p></p>"}],"value":"IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.20.4Follow the  kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4  from the IBM Turbonomic documentation"}],"title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability"}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-14435","datePublished":"2026-11-08T17:21:24.772Z","dateReserved":"2026-07-01T21:51:42.502Z","dateUpdated":"2026-11-08T17:21:24.772Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-08 18:17:01","lastModifiedDate":"2026-11-08 18:17:01","problem_types":["CWE-295","CWE-295 CWE-295 Improper Certificate Validation"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"14435","Ordinal":"1","Title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Applicatio","CVE":"CVE-2026-14435","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"14435","Ordinal":"1","NoteData":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.","Type":"Description","Title":"IBM Turbonomic kubeturbo agent used by IBM Turbonomic Applicatio"}]}}}