CVE-2026-14875CWE-426

CVE-2026-14875

High · published August 14, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2026-08-14T00:17Z
Affected products (1)
ProductVersionsFixed in
ibm/i_access_client_solutions≥ 1.1.2, < 1.1.9.141.1.9.14
References (1)
https://www.ibm.com/support/pages/node/7282954 · [email protected]
EPSS history
Timeline
  • 13 AUG 19:38Z
    IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
    cvelistv5