Medium · 4.3 CVE-2026-16713 EUVD-2026-58366GHSA-wv43-5q36-5wg7

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Published Aug 13, 2026 · Updated Aug 17, 2026 · Assigned by ibm

Vendor: IBM Product: Documentation Offline

Description

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

Affected products

Vendor	Product	Affected	Fixed
IBM	Documentation Offline	1.0.0 – ≤ 1.4.1	—

References

https://www.ibm.com/support/pages/node/7283484 vendor-advisory patch