CVE-2026-17473: IBM Documentation Offline

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.

Affected products

• IBM Documentation Offline: from 1.0.0, up to and including 1.4.1

Published 2026-08-13. Last modified 2026-08-25.