CVE Catalog

CVE-2026-16695

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

5th percentile - higher than 5% of all known CVEs

Summary

IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Risk Assessment

A local attacker could gain the ability to execute arbitrary code in the user's context, potentially leading to full system compromise.

Recommendation

Update IBM i Access Client Solutions to a patched version and restrict access to the application to trusted users only.

Original NVD description (English source)

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS