CVE Catalog
CVE-2026-17482
CriticalCVSS 9.8Summary
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
Risk Assessment
The risk includes remote code execution on the server, potentially leading to full system and data compromise.
Recommendation
It is recommended to update IBM Documentation Offline to a patched version and implement strict file path validation.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.