CVE Catalog
CVE-2026-17481
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.
Risk Assessment
The risk includes the possibility of remote arbitrary code execution, which could lead to full system compromise.
Recommendation
It is recommended to update IBM Documentation Offline to the latest version and restrict access to the application.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.