CVE-2026-17481

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.

Scoring

Severity

HIGH

CVSS base score

8.8

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.57%

CWE

CWE-117

Published

2026-08-13

Last modified

2026-08-14

Affected products

• IBM Documentation Offline

Weakness type

• CWE-117

Related vulnerabilities

• CVE-2026-14350 — Vulnerabilities exists in IBM Cloud Pak for Data System
• CVE-2026-9736 — Vulnerabilities exists in IBM Netezza Software
• CVE-2026-15603 — morgan vulnerable to Log Forging via unescaped Unicode line separators
• CVE-2026-81696 — openssl_encrypt before 1.4.9 Terminal Injection via info Command
• CVE-2026-81695 — openssl_encrypt before 1.4.9 Terminal Injection via key_id
• CVE-2026-81694 — verify-usb before 1.4.9 Output Injection via Unsanitized Filenames
• CVE-2026-54511 — @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
• CVE-2026-44256 — Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

Markdown version · Browse all CVEs