CVE Catalog
CVE-2026-17482
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.55%
43th percentile - higher than 43% of all known CVEs
Summary
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
Risk Assessment
The risk includes remote code execution on the server, potentially leading to full system and data compromise.
Recommendation
It is recommended to update IBM Documentation Offline to a patched version and implement strict file path validation.
Original NVD description (English source)
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.