CVE-2026-7770 HIGH

CVE-2026-7770: IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator

Vendor Ibm

Product i Access Family

Weakness CWE-74

Published June 1, 2026

Last update June 2, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.

Key dates

02Disclosure timeline

June 1, 2026 CVE published

June 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-7770 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/74.html

Related vulnerabilities

04Related CVE

CVE-2024-2064 rahman SelectCours Template CacheController.java getCacheNames injection CVE-2024-39906 Remote code execution in Haven IndieAuthClient (GHSL-2024-093) CVE-2022-31777 Apache Spark XSS vulnerability in log viewer UI Javascript CVE-2026-41319 MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade CVE-2019-11275 CSV Injection in usage report downloaded from Pivotal Application Manager