What is the CVSS score of CVE-2026-16695?

CVE-2026-16695 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of IBM i Access Client Solutions are affected by CVE-2026-16695?

IBM i Access Client Solutions (versions 1.1.2.0-1.1.9.13) contains an OS command injection vulnerability that enables local code execution when users process malicious files or input.. A patch is available.

How to fix or mitigate CVE-2026-16695?

Within 24 hours: inventory all IBM i Access Client Solutions deployments and identify systems running versions 1.1.2.0 through 1.1.9.13. Within 7 days: deploy the vendor-released patch referenced in IBM advisory node/7282954 to all affected installations, prioritizing systems with elevated access to critical i platforms. Within 30 days: verify patch deployment across the environment via software inventory tools, validate that no systems remain on vulnerable versions, and document evidence of remediation for audit purposes.

IBM i Access Client Solutions CVE-2026-16695

EUVD-2026-57609 HIGH

OS Command Injection (CWE-78)

2026-08-12 ibm

GHSA-c6h7-4284-vpr2

RCE Command Injection IBM I Access Client Solutions

7.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local vector with user interaction confirmed by desktop client context; PR:N because attacker delivers malicious file without needing a system account.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 21:33 vuln.today

CVE Published

Aug 12, 2026 - 20:41 nvd

HIGH 7.8

DescriptionCVE.org

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

AnalysisAI

OS command injection in IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 enables a local attacker to execute arbitrary code on the underlying operating system. Exploitation requires user interaction (UI:R) but no prior privileges (PR:N), suggesting the attack vector involves a maliciously crafted file or input that a victim opens or processes with the client application. IBM has released a patch via advisory node/7282954, and no public exploit or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

IBM i Access Client Solutions is a Java-based desktop client application used to connect to IBM i (formerly AS/400) servers from Windows, Linux, and macOS workstations. CWE-78 (OS Command Injection) indicates that user-controlled or externally-supplied data reaches a system shell execution call without adequate sanitization - special characters such as semicolons, pipes, backticks, or newlines are not neutralized before being passed to an OS command. The CPE string (cpe:2.3:a:ibm:i_access_client_solutions:*:*:*:*:*:*:*:*) covers all builds from 1.1.2.0 to 1.1.9.13. Because the CVSS vector specifies AV:L, the injection point exists within the local application context rather than over a network-exposed service, consistent with a desktop client processing crafted input files, configuration data, or user-supplied arguments.

RemediationAI

Vendor-released patch is available per IBM advisory at https://www.ibm.com/support/pages/node/7282954 - organizations should upgrade IBM i Access Client Solutions to the version specified in that advisory immediately. The exact patched release version is not independently confirmed from the provided data; administrators must consult the advisory for the target version. As a compensating control where immediate patching is not feasible, restrict the application from opening files from untrusted or externally-sourced locations and educate users not to open unsolicited ACS-associated files (e.g., connection profiles, macro files, data transfer configuration files). Additionally, applying application-layer controls such as restricting execution permissions for the ACS process can limit the blast radius of command injection. Note that user-behavior mitigations are inherently unreliable and patch deployment remains the only reliable fix.