AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-13433

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13

IBM

CVE-2026-13433 · Published Aug 12, 2026 · updated Aug 18, 2026

High8.3
No fix yet
IBM advisory

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.

Affected versions

PackageAffectedFixed in
i Access Client Solutions
Product
>= 1.1.2.0, <= 1.1.9.13No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-494

More IBM advisories

All IBM
Medium 4.2Aug 12IBM DataPower Gateway: race conditionCVE-2026-7366no fix yetHigh 8.4Aug 12IBM Db2: buffer overflowCVE-2026-10534no fix yetHigh 8.2Aug 12IBM i: denial of serviceCVE-2026-17485no fix yetCritical 10.0Aug 12IBM DOORS Next: improper authenticationCVE-2024-27253no fix yetMedium 4.3Aug 12IBM Db2: improper authorizationCVE-2026-16480no fix yetHigh 7.8Aug 12IBM i Access Client Solutions: code executionCVE-2026-16695no fix yet