What is the CVSS score of CVE-2026-16713?

CVE-2026-16713 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-16713?

Yes, a patch is available for CVE-2026-16713. Update the affected software to the latest version immediately.

IBM Documentation Offline CVE-2026-16713

EUVD-2026-58366 MEDIUM

Binding to an Unrestricted IP Address (CWE-1327)

2026-08-13 ibm

GHSA-wv43-5q36-5wg7

Information Disclosure IBM Documentation Offline

5.3

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

MEDIUM

qualitative

NVD

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Adjacent vector (AV:A) confines exploitation to local network segments; no authentication required (PR:N); impact is limited to low confidentiality disclosure of documentation content with no integrity or availability effect.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVSS changed

Aug 17, 2026 - 16:52 NVD

4.3 (MEDIUM) 5.3 (MEDIUM)

Analysis Generated

Aug 13, 2026 - 20:51 vuln.today

DescriptionNVD

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

AnalysisAI

Information disclosure in IBM Documentation Offline 1.0.0 through 1.4.1 exposes sensitive documentation content to unauthenticated adjacent network attackers due to the server binding to an unrestricted IP address (0.0.0.0 or equivalent) rather than restricting to localhost. The CVSS vector (AV:A/PR:N) confirms exploitation requires no credentials and is limited to the local network segment - internet-facing exploitation is not possible. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis; a vendor patch is available.

Technical ContextAI

CWE-1327 (Binding to an Unrestricted IP Address) describes a misconfiguration where a server process listens on all available network interfaces (e.g., 0.0.0.0) instead of restricting to a loopback or specific trusted interface. IBM Documentation Offline is an offline documentation server for IBM software products, intended for local use. When bound to an unrestricted address, any host on the same adjacent network can reach the documentation server's HTTP port without authentication. The CPE string cpe:2.3:a:ibm:documentation_offline:*:*:*:*:*:*:*:* indicates all releases from 1.0.0 through 1.4.1 carry this default misconfiguration. The vulnerability is purely a configuration flaw at the socket binding layer, not a logic or memory corruption issue.

RemediationAI

Apply the vendor-released patch per IBM advisory at https://www.ibm.com/support/pages/node/7283484; the exact fixed version is not independently confirmed from the available data and should be verified against the advisory. As an immediate compensating control pending patching, configure the IBM Documentation Offline server to bind exclusively to the loopback interface (127.0.0.1) rather than all interfaces - this eliminates adjacent network exposure entirely but restricts access to the local host only. Alternatively, use host-based firewall rules (e.g., iptables, Windows Firewall) to block inbound connections to the documentation server port from all sources except trusted local addresses. Network-level segmentation (placing documentation servers on isolated VLANs inaccessible to untrusted adjacent hosts) is an additional defensive layer. Binding restriction is the most precise and lowest-impact control; firewall rules are a viable alternative with no functionality loss.