CVE-2026-14875 HIGH

CVE-2026-14875: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Vendor Ibm

Product i Access Client Solutions

Weakness CWE-426

Published August 13, 2026

Last update August 13, 2026

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.

Key dates

02Disclosure timeline

August 13, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-14875 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/426.html AskarLabs — CWE-426 write-up Untrusted Search Path

Identifiers

CVE CVE-2026-14875

CWE CWE-426

CVSS 7.3 / HIGH

Affected versions

Vendor Ibm

Product i Access Client Solutions

Affected ≥ 1.1.2.0 and ≤ 1.1.9.13