CVE-2026-13433
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerability to run compromised code on the ACS user's workstation.
Risk Assessment
An attacker could run malicious code on the ACS user's workstation, potentially leading to data theft or system takeover.
Recommendation
Update ACS to the latest version and configure updates only from trusted sources.
Original NVD description (English source)
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.