CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-14277

IBM i Access Client Solutions (ACS) , versions 1.1.2.0 through 1.1.9.15 , is affected by an OS command injection vulnerability (CWE-78) caused by improper validation of user-supplied input in a session file . An authenticated user can exploit this to execute arbitrary commands with normal user pr...

Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Summary IBM i Access Client Solutions ACS is vulnerable to multiple vulnerabilities CVE-2026-14275, CVE-2026-14276, CVE-2026-14277 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-14276 DESCRIPTION: IBM i Access Client Solutions could allow an authenticated...

CVE-2026-14875 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

CVE-2026-14875 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

CVE-2026-14875

CVE-2026-14875 affects IBM i Access Client Solutions (ACS) on Windows, with versions 1.1.2.0 through 1.1.9.13 vulnerable when installed for all users due to a publicly writable directory. The underlying issue enables arbitrary code execution with local access and requires user interaction. IBM’s ...

CVE-2026-13094

IBM i Access Client Solutions (ACS) is affected by CVE-2026-13094. Vulnerable versions are ACS 1.1.2.0 through 1.1.9.13 on Windows when installed for all users, due to a publicly writable configuration file that enables arbitrary code execution. The IBM advisory lists a base CVSS v3.1 score of 7....

CVE-2026-13433 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 ACS is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation...

CVE-2026-13433

IBM i Access Client Solutions 1.1.2.0–1.1.9.13 downloads unverified code from an IBM i source (CWE-494), allowing a bad actor to execute compromised code on the user's workstation. IBM CVSS scores this 8.3 (HIGH). Fix: upgrade to version 1.1.9.14 or later. No in-the-wild exploitation reported. No...

CVE-2026-13105

CVE-2026-13105 affects IBM i Access Client Solutions (ACS) versions 1.1.2.0–1.1.9.13. The vulnerability is a zip slip/path traversal issue that occurs when importing a configuration, arising from improper handling of archive paths. Impact is high (C:H/I:H/A:H) as per IBM’s CVSS vector, with netwo...

EUVD-2026-57611

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration...

CVE-2026-16695 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-16695

IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.13 are affected by CVE-2026-16695, a local code execution vulnerability caused by improper neutralization of special elements used in an OS command. The issue affects the ACS component of IBM i Access Client Solutions and is categ...

CVE-2026-14866 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...

CVE-2026-14866

IBM i Access Client Solutions (ACS) versions 1.1.2.0–1.1.9.13 are affected by multiple vulnerabilities, including CVE-2026-14866, due to a publicly writable truststore that enables injection of rogue certificates. The cited advisory and CVE list indicate a local attack surface with high impact on...

CVE-2026-14866 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...