01 Record

CVE-2026-17473

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

HighPUBLISHEDCNA: ibm

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

View raw JSON CVE Program record

02 Description

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

03 Metadata

Published: 2026-08-13 20:37Z22 HR AGO
Last updated: 2026-08-14 16:35Z2 HR AGO
Reserved: 2026-07-25
Assigning CNA: ibm
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-22
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 3ac5fa8084b226cda8f054fd2939190ccff6326fc77ba60e437517a1efaa00d8

04 Affected products

VendorProductVersionsPlatforms

IBMDocumentation Offline1.0.0 to 1.4.1—

05 References

www.ibm.comhttps://www.ibm.com/support/pages/node/7283484vendor-advisorypatch

06 Remediation

IBM strongly recommends addressing the vulnerability now. Product(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Documentation Offline1.0.0 - 1.4.1Download and install latest release (1.5.1)