CVSS 9.6 (critical) · published 2026-08-12
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.
Affected products (NVD): ibm i_access_client_solutions
Fixed in (NVD): 1.1.9.14
Weakness: CWE-494
Source: NVD CVE-2026-13433
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.