CVE-2026-14866: IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.

PriorityP335high7.1CVSS 3.1

AVLACLPRLUINSUCHIHAN

EPSS

0.11%

1.0th percentile

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	i_access_client_solutions	>= 1.1.2 < 1.1.9.14	1.1.9.14
ibm	i_access_client_solutions	1.1.2.0 – 1.1.9.13	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.