Ibm

I Access Client Solutions

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2026-14275

  • EPSS 0.27%
  • Veröffentlicht 14.09.2026 21:17:02
  • Zuletzt bearbeitet 17.09.2026 12:17:23

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL co...

6.3

CVE-2026-14276

  • EPSS 0.27%
  • Veröffentlicht 14.09.2026 21:17:02
  • Zuletzt bearbeitet 17.09.2026 12:17:24

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emul...

7.8

CVE-2026-14875

  • EPSS 0.12%
  • Veröffentlicht 13.08.2026 19:38:29
  • Zuletzt bearbeitet 17.08.2026 18:26:45

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.

7.8

CVE-2026-13094

  • EPSS 0.15%
  • Veröffentlicht 12.08.2026 20:45:18
  • Zuletzt bearbeitet 18.08.2026 14:58:22

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.

9.6

CVE-2026-13433

  • EPSS 0.11%
  • Veröffentlicht 12.08.2026 20:44:47
  • Zuletzt bearbeitet 18.08.2026 14:46:08

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.

8.8

CVE-2026-13105

  • EPSS 0.34%
  • Veröffentlicht 12.08.2026 20:42:06
  • Zuletzt bearbeitet 18.08.2026 14:53:24

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.

7.8

CVE-2026-16695

  • EPSS 0.15%
  • Veröffentlicht 12.08.2026 20:41:05
  • Zuletzt bearbeitet 18.08.2026 19:00:11

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

7.1

CVE-2026-14866

  • EPSS 0.08%
  • Veröffentlicht 12.08.2026 20:16:57
  • Zuletzt bearbeitet 18.08.2026 18:58:00

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.

8.8

CVE-2026-7770

  • EPSS 0.44%
  • Veröffentlicht 01.06.2026 17:45:00
  • Zuletzt bearbeitet 26.08.2026 14:37:20

IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.

5.5

CVE-2024-22318

  • EPSS 0.57%
  • Veröffentlicht 09.02.2024 01:15:09
  • Zuletzt bearbeitet 21.11.2024 08:56:03

IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM...