Vulnerability intelligence

CVE-2026-17473

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.

CVSS Score

7.5

High

EPSS — Exploit Probability

0.5%

Riskier than 38% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Aug 19, 2026 · latest Aug 19, 2026

Coverage timeline

CVE-2026-17482: IBM Remote Code Execution Flaw (CVSS 9.8)
securityonline.info · Aug 19, 2026