{"affected":[{"product":"Turbonomic kubeturbo agent","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"8.21.2","status":"affected","version":"8.16.0","versionType":"semver"}]}],"cveId":"CVE-2026-14377","cwes":[],"description":"IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.4,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794158454342,"publishedAt":1794158454342,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7293164"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.21.3 kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7293164"}],"revision":"f87ed0777bb2614b3c2478555baf27450e092284d16812ad6c83e5a885a7e207","sources":[{"modifiedAt":1794158454342,"name":"CNA: ibm","retrievedAt":1794161323620,"url":"https://www.cve.org/CVERecord?id=CVE-2026-14377"}],"ssvc":null,"status":"published","title":"IBM Turbonomic kubeturbo agent, used by IBM Turbonomic Application Resource Management, is affected by a security vulnerability","updatedAt":1794161323620}