CVE-2026-14875

HighCVSS 7.3

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 are vulnerable to arbitrary code execution on Windows when installed for all users due to a publicly writeable directory.

Risk Assessment

An attacker could place a malicious file in the directory, potentially leading to code execution in the user or system context.

Recommendation

Update IBM i Access Client Solutions to the latest version and consider installing only for the current user.

Original NVD description (English source)

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.