CVE-2026-16713CWE-1327

CVE-2026-16713

Medium · published August 14, 2026

CVSS v3.1

4.3

EPSS

Percentile

39.1

In the wild

Unconfirmed

What it is

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00463 · 39.1th percentile
Weakness: CWE-1327 · Binding to an Unrestricted IP Address
Published: 2026-08-14T00:17Z

Affected products (1)

Product	Versions	Fixed in
ibm/documentation_offline	≥ 1.0.0, < 1.5.1	1.5.1

References (1)

https://www.ibm.com/support/pages/node/7283484 · [email protected]

EPSS history

Timeline

13 AUG 19:40Z
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
cvelistv5