Ibm: >> I Access Client Solutions >> 1.1.9.8 Security Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.
CVSS Score
7.3
EPSS Score
0.001
Published
2026-08-13
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-08-12
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-08-12
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.
CVSS Score
8.3
EPSS Score
0.001
Published
2026-08-12
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.
CVSS Score
7.7
EPSS Score
0.001
Published
2026-08-12
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-08-12