CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - 本地服务器访问控制失效。 时间线 漏洞报告给供应商: 2023年9月22日 新的修复版本 1.1.9.4 发布: 2023年12月8日 公开披露: 2023年12月15日 描述 IBM i Access Client Solutions 用于存储临时密码加密密钥时，会使用一个单独的本地服务器，该服务器在随机 TCP6 端口上启动。应用程序在检索此临时加密密钥时没有任何访问控制。 可以使用 netstat 命令轻松找到本地服务器：...

CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - 脆弱なパスワード暗号化 タイムライン ベンダーに脆弱性を報告: 22.09.2023 修正済みバージョン1.1.9.4のリリース: 08.12.2023 公開開示: 15.12.2023 説明 IBM i Access Client...

CVE-2026-14277

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-14275

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14276

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

EUVD-2026-78150

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14275

CVE-2026-14275 affects IBM i Access Client Solutions (ACS) , versions 1.1.2.0 through 1.1.9.15. An authenticated user can execute arbitrary commands with normal user privileges by exploiting improper validation of user-supplied input in a STRPCCMD CL command (CWE-78, OS Command Injection). The vu...

CVE-2026-14275 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14275 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14276

IBM i Access Client Solutions (versions 1.1.2.0 through 1.1.9.15 ) is affected by an OS command injection vulnerability (CWE-78) in the emulator macro RunProgram action . An authenticated user can supply malicious input to this action, allowing arbitrary command execution with normal user privile...

EUVD-2026-78149

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

EUVD-2026-78148

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

PT-2026-91723

Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description An authenticated user can execute arbitrary commands with normal user privileges on the system. This occurs due to improper validation of user-supplied input within a session...

PT-2026-91721

Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in the STRPCCMD CL command allows an authenticated user to execute arbitrary...

PT-2026-91722

Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in a malicious emulator macro RunProgram action could allow an authenticated use...

CVE-2026-14277: Improper Neutralization of Special Elements used in an OS Command

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-14276: Improper Neutralization of Special Elements used in an OS Command

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

CVE-2026-14275: Improper Neutralization of Special Elements used in an OS Command

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...