Security Flaw in IBM TS4500 CLI Tool Affects TLS Certificate Validation
CVE-2026-16107

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Ts4500 Cli Tool
Vendor
CVE Published:
28 July 2026

What is CVE-2026-16107?

The IBM TS4500 CLI tool, specifically versions 0.1.31 through 1.12.0.0, is subject to a vulnerability that arises from the failure to properly validate TLS certificate validation. This oversight can expose sensitive information to potential attackers utilizing man-in-the-middle techniques, allowing them to intercept communication without detection. Organizations using affected versions must apply recommended patches to mitigate risks associated with this vulnerability to safeguard their data and ensure secure communications.

Affected Version(s)

TS4500 CLI tool Versions:  0.1.31 <= 1.12.0.0

References

https://www.ibm.com/support/pages/node/7280583
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.