CVE-2026-17482: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Published Aug 13, 2026

Updated

IBM Documentation could allow a remote attacker to execute arbitrary code due to improper control of file paths.

Other sources

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.

— MITRE

Affected Software

1 affected componentFixes available

IBM Documentation Offline<=1.0.0 - 1.4.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Documentation Offline to a version that resolves this vulnerability.
Fixed in 1.5.1

Event History

Aug 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·08:39 PM

Data Sourced

via MITRE·08:39 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283484

Frequently Asked Questions

What is the severity of CVE-2026-17482?

CVE-2026-17482 has a critical severity rating of 9.8.

How do I fix CVE-2026-17482?

To fix CVE-2026-17482, upgrade to the latest version of IBM Documentation Offline that addresses the vulnerability.

What type of attacks can be carried out using CVE-2026-17482?

CVE-2026-17482 can enable remote attackers to execute arbitrary code, leading to information disclosure and session forgery.

Which versions of IBM Documentation Offline are affected by CVE-2026-17482?

CVE-2026-17482 affects IBM Documentation Offline versions 1.0.0 through 1.4.1.

What are the potential impacts of exploiting CVE-2026-17482?

Exploiting CVE-2026-17482 can result in arbitrary code execution, which may compromise system integrity and confidentiality.

CVE-2026-17482: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Other sources

Affected Software

Remediation

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-17482?

How do I fix CVE-2026-17482?

What type of attacks can be carried out using CVE-2026-17482?

Which versions of IBM Documentation Offline are affected by CVE-2026-17482?

What are the potential impacts of exploiting CVE-2026-17482?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-17482?

How do I fix CVE-2026-17482?

What type of attacks can be carried out using CVE-2026-17482?

Which versions of IBM Documentation Offline are affected by CVE-2026-17482?

What are the potential impacts of exploiting CVE-2026-17482?