CVE Intelligence

Ibm I Access Client Solutions vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm I Access Client Solutions: 7 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:i_access_client_solutions

CVE-2026-14875 High · 7.8 CWE-426 Aug 13, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.
CVE-2026-16695 High · 7.8 CWE-78 Aug 12, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-14866 High · 7.1 CWE-798 Aug 12, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.
CVE-2026-13433 Critical · 9.6 CWE-494 Aug 12, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.
CVE-2026-13105 High · 8.8 CWE-22 Aug 12, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.
CVE-2026-13094 High · 7.8 CWE-94 Aug 12, 2026
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.
CVE-2026-7770 High · 8.8 CWE-74 Jun 1, 2026
IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator
IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.