What’s Vulnerable › Vulnerabilities

CVE-2026-17468: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-13 · updated 2026-08-25
• Weakness: CWE-321

Description

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.

Affected products

• IBM Documentation Offline: from 1.0.0 through 1.4.1

References

• https://www.ibm.com/support/pages/node/7283484

Get alerted when CVE-2026-17468 or the next vulnerability affects your stack