CVE-2026-17482

IBM Documentation Offline (versions 1.0.0–1.4.1) is affected by CVE-2026-17482: improper control of file paths in the embedded server could allow a remote attacker to execute arbitrary code. Impact is high (CVSS 3.1: 9.8; NETWORK, NONE user interaction). The vulnerability is tied to external cont...

CVE-2026-17473

IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-17473: information disclosure via path traversal caused by improper limitation of a pathname to a restricted directory. A remote attacker could read arbitrary files. CVSS v3.1 base score 7.5 (HIGH). Remediation: upgrade to 1.5.1.

CVE-2026-17481

IBM Documentation Offline (1.0.0–1.4.1), an Electron/Node.js desktop app, has CWE-117: improper log output neutralization allowing remote code execution (CVSS 8.8). The embedded server binds to all network interfaces. IBM recommends upgrading to 1.5.1; no workaround is available. No in-the-wild e...

CVE-2026-16713

IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-16713, a security misconfiguration where the embedded Node.js server binds to an unrestricted IP address, enabling a remote attacker on the network to obtain sensitive information. The IBM bulletin (and NVD entry) describe this as an i...

CVE-2026-17468

CVE-2026-17468 affects IBM Documentation Offline (versions 1.0.0–1.4.1). The embedded server uses a hardcoded session secret, enabling a remote attacker to forge valid session tokens and manipulate client-side state (session forgery). This is part of multiple vulnerabilities in the IBM Documentat...