Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-17482 EUVD-2026-58459GHSA-fvvq-gc75-jg22

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Published Aug 13, 2026 · Updated Aug 17, 2026 · Assigned by ibm

Vendor: IBM Product: Documentation Offline

Description

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.

Affected products

VendorProductAffectedFixed
IBM Documentation Offline 1.0.0 – ≤ 1.4.1 —

References