CVE-2026-13094: IBM I Access Client Solutions

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.

Affected products

• IBM I Access Client Solutions: from 1.1.2, before 1.1.9.14 (fixed in 1.1.9.14)

Published 2026-08-12. Last modified 2026-08-18.