CVE Catalog
CVE-2026-14866
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk0.08%
0th percentile - higher than 0% of all known CVEs
Summary
IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.
Risk Assessment
An attacker can add their own certificate to the truststore, potentially enabling interception or modification of encrypted communication, compromising data confidentiality and integrity.
Recommendation
Update IBM i Access Client Solutions to a patched version and secure the truststore against unauthorized writes.
Original NVD description (English source)
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.