AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-14866

IBM i Access Client Solutions: hard-coded credentials

IBM

CVE-2026-14866 · Published Aug 12, 2026 · updated Aug 18, 2026

High7.7
No fix yet
IBM advisory

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.

Affected versions

PackageAffectedFixed in
i Access Client Solutions
Product
>= 1.1.2.0, <= 1.1.9.13No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-798

More IBM advisories

All IBM
Medium 4.2Aug 12IBM DataPower Gateway: race conditionCVE-2026-7366no fix yetHigh 8.4Aug 12IBM Db2: buffer overflowCVE-2026-10534no fix yetHigh 8.2Aug 12IBM i: denial of serviceCVE-2026-17485no fix yetCritical 10.0Aug 12IBM DOORS Next: improper authenticationCVE-2024-27253no fix yetMedium 4.3Aug 12IBM Db2: improper authorizationCVE-2026-16480no fix yetHigh 7.8Aug 12IBM i Access Client Solutions: code executionCVE-2026-16695no fix yet