CVE Catalog
CVE-2026-17473
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.46%
38th percentile - higher than 38% of all known CVEs
Summary
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
Risk Assessment
The risk includes the possibility of unauthorized reading of sensitive files, which could lead to data leakage.
Recommendation
It is recommended to update IBM Documentation Offline to the latest version and implement file access controls.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.