CVE-2026-17468

MediumCVSS 5.3

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

IBM Documentation Offline versions 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.

Risk Assessment

An attacker could hijack user sessions and gain unauthorized access to the system, potentially leading to data confidentiality breaches.

Recommendation

Immediately update to a version that does not contain the hardcoded key and rotate all existing session keys.

Original NVD description (English source)

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.