CVE-2026-16713
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
Risk Assessment
Unauthorized users may gain access to documentation and potentially sensitive data, which could compromise information confidentiality.
Recommendation
Configure the documentation server to bind only to trusted IP addresses and apply available security updates.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

