What is the CVSS score of EUVD-2026-58458?

EUVD-2026-58458 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of IBM Documentation Offline are affected by EUVD-2026-58458?

IBM Documentation Offline versions 1.0.0 through 1.4.1 contain a critical remote code execution vulnerability (CVE-2026-17481, CVSS 9.8) that unauthenticated network attackers can exploit to achieve…. A patch is available.

How to fix or mitigate EUVD-2026-58458?

Within 24 hours, identify all systems running IBM Documentation Offline versions 1.0.0 through 1.4.1 and obtain the vendor-released patch. Within 7 days, deploy the patched version across all identified systems, prioritizing production and internet-facing instances. Within 30 days, complete remediation verification and confirm all systems are running a patched version.

IBM Documentation Offline EUVD-2026-58458

| CVE-2026-17481 CRITICAL

Improper Output Neutralization for Logs (CWE-117)

2026-08-13 ibm

GHSA-52mc-rhgp-6j85

IBM RCE Documentation Offline

9.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.1 HIGH

Network-reachable and unauthenticated per vendor, but CWE-117-to-RCE requires an undocumented secondary log sink, so AC:H; total impact retained as C/I/A:H.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 17, 2026 - 13:59 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 17, 2026 - 13:52 vuln.today

cvss_changed

Severity Changed

Aug 17, 2026 - 13:52 NVD

HIGH CRITICAL

CVSS changed

Aug 17, 2026 - 13:52 NVD

8.8 (HIGH) 9.8 (CRITICAL)

Analysis Generated

Aug 13, 2026 - 21:41 vuln.today

CVE Published

Aug 13, 2026 - 20:38 nvd

HIGH 8.8

DescriptionNVD

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.

AnalysisAI

Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 stems from improper neutralization of output written to logs (CWE-117), which a remote attacker can leverage to run arbitrary code with total impact to confidentiality, integrity, and availability. IBM has published a fix, and the vendor CVSS of 9.8 reflects an unauthenticated network-reachable vector; however, EPSS is low (0.27%, 19th percentile) and there is no public exploit identified at time of analysis, so exposure appears theoretical rather than active. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Reach exposed Documentation Offline service

Delivery

Submit input with log control characters

Exploit

Poison log via improper output neutralization

Execution

Injected payload hits log-processing sink

Impact

Execute arbitrary code on host

Access

Reach exposed Documentation Offline service

Delivery

Submit input with log control characters

Exploit

Poison log via improper output neutralization

Execution

Injected payload hits log-processing sink

Impact

Execute arbitrary code on host

Vulnerability AssessmentAI

Exploitation	The vendor CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication and no user interaction against a network-reachable instance, so the nominal prerequisite is simply reaching the Documentation Offline web service on an affected version (1.0.0-1.4.1). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The vendor CVSS vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H = 9.8) describes a maximally severe, unauthenticated, low-complexity remote flaw, and SSVC rates Technical Impact as 'total.' Countervailing signals lower the real-world urgency: SSVC Exploitation is 'none' and Automatable is 'no,' EPSS is only 0.27% (19th percentile), the CVE is not in CISA KEV, and no public exploit is identified. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with network access to an exposed IBM Documentation Offline instance submits crafted input containing control characters or markup that the application writes verbatim into its logs; if a downstream log-processing sink interprets that content, the injected payload is evaluated and arbitrary code runs on the host. No authentication or user interaction is required per the vendor CVSS vector, but no public proof-of-concept is available to lower the effort of building this chain.
Remediation	Patch available per vendor advisory: apply the fix referenced in IBM support document https://www.ibm.com/support/pages/node/7283484, which is the primary and recommended remediation - consult that page for the exact fixed build, as the specific patched version number is not included in the supplied intelligence and should not be guessed. … Detailed patch versions, workarounds, and compensating controls in full report.