IBM I Access Family vulnerabilities

3 CVEs affecting IBM I Access Family, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-14277, published 2026-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-14277, published 2026-09-14. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied…
CVE-2026-14276, published 2026-09-14. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper…
CVE-2026-14275, published 2026-09-14. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper…