CVE Catalog
CVE-2026-13094
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.
Risk Assessment
A local or remote attacker could modify the configuration file and execute arbitrary code in the context of the ACS user, potentially leading to workstation takeover.
Recommendation
Update ACS to the latest version and install it only for the current user, not for all users.
Original NVD description (English source)
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.