Veille CVE

Recherche « Ibm i access client solutions »

9 CVE

Critique 1 Élevée 6 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm i access client solutions » ✕
  1. CVE-2026-14276 6.3 Moyenne

    IBM i Access Family

    IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action.

  2. CVE-2026-14275 6.3 Moyenne

    IBM i Access Family

    IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command.

  3. CVE-2026-14875 7.8 Élevée

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.

  4. CVE-2026-16695 7.8 Élevée

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

  5. CVE-2026-14866 7.1 Élevée

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.

  6. CVE-2026-13433 9.6 Critique

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.

  7. CVE-2026-13105 8.8 Élevée

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.

  8. CVE-2026-13094 7.8 Élevée

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.

  9. CVE-2026-7770 8.8 Élevée

    IBM i Access Family · Ibm i access client solutions

    IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.