What is GHSA-4hr2-m986-47j9?

GHSA-4hr2-m986-47j9 is a security advisory published by GitHub Security Advisories with Medium severity. IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates...

Which CVE IDs does GHSA-4hr2-m986-47j9 cover?

GHSA-4hr2-m986-47j9 covers the following CVE IDs: CVE-2026-14434. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hr2-m986-47j9?

GHSA-4hr2-m986-47j9 has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-4hr2-m986-47j9MediumCVSS 5.9

IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates...

Vendor

GitHub Security Advisories

Published

November 8, 2026

Last Modified

November 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-14434 →

📋 Description

IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14434
https://www.ibm.com/support/pages/node/7290680
https://github.com/advisories/GHSA-4hr2-m986-47j9