7.5
High
CVE-2026-17473 IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper…
Description
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Documentation Offline 1.0 | 1.0.0 → 1.4.1 | No fix stated |
Other CVEs of Documentation Offline
The 5 CVEs of Documentation Offline →
CVE-2026-17482
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper…
9.8
Critical
CVE-2026-17481
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper…
8.8
High
CVE-2026-17468
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use…
5.3
Medium
CVE-2026-16713
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive…
4.3
Medium