Insecure TLS Certificate Validation in IBM Turbonomic
CVE-2026-14435

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Turbonomic Kubeturbo Agent
Vendor
CVE Published:
8 November 2026

What is CVE-2026-14435?

IBM Turbonomic kubeturbo agent versions 8.16.0 to 8.20.3 fail to adequately validate TLS certificates, potentially exposing users to man-in-the-middle attacks. This oversight may allow attackers to intercept and manipulate sensitive data transmitted between clients and services. Organizations using affected versions are advised to review their security posture and promptly apply available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

Turbonomic kubeturbo agent 8.16.0 <= 8.20.3

References

https://www.ibm.com/support/pages/node/7290683
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.