Skip to content
OpenAdvisories
High · 8.8 CVE-2026-17481 EUVD-2026-58458GHSA-52mc-rhgp-6j85

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Published Aug 13, 2026 · Updated Aug 14, 2026 · Assigned by ibm

Vendor: IBM Product: Documentation Offline

Description

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.

Affected products

VendorProductAffectedFixed
IBM Documentation Offline 1.0.0 – ≤ 1.4.1 —

References