CVE-2026-16713
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
Risk Assessment
Unauthorized users may gain access to documentation and potentially sensitive data, which could compromise information confidentiality.
Recommendation
Configure the documentation server to bind only to trusted IP addresses and apply available security updates.
Other vulnerabilities in IBM Documentation Offline
See all- CVE-2026-17482Critical
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
- CVE-2026-17481High
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.
- CVE-2026-17473High
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
- CVE-2026-17468Medium
IBM Documentation Offline versions 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS