What’s Vulnerable › Vulnerabilities

CVE-2026-17473: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-13 · updated 2026-08-25
• Weakness: CWE-22

Description

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.

Affected products

• IBM Documentation Offline: from 1.0.0 through 1.4.1

References

• https://www.ibm.com/support/pages/node/7283484

Get alerted when CVE-2026-17473 or the next vulnerability affects your stack