What is the CVSS score of EUVD-2026-58459?

EUVD-2026-58459 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of IBM Documentation Offline are affected by EUVD-2026-58459?

IBM Documentation Offline versions 1.0.0 through 1.4.1 contain a critical remote code execution vulnerability enabling unauthenticated attackers to achieve complete system compromise without user…. A patch is available.

How to fix or mitigate EUVD-2026-58459?

Within 24 hours, identify all systems running IBM Documentation Offline 1.0.0 through 1.4.1 and isolate or restrict network access until patching is complete. Within 7 days, obtain the vendor-released patch from IBM and apply it to all affected instances, prioritizing systems with external network exposure or containing sensitive data. Within 30 days, verify all systems have been updated to the patched version, conduct network scans to confirm no vulnerable instances remain, and review access logs dating back 90 days for evidence of exploitation attempts.

IBM Documentation Offline EUVD-2026-58459

| CVE-2026-17482 CRITICAL

External Control of File Name or Path (CWE-73)

2026-08-13 ibm

GHSA-fvvq-gc75-jg22

RCE IBM Documentation Offline

9.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Vendor describes network-reachable unauthenticated RCE via path control with no user interaction, giving AV:N/AC:L/PR:N/UI:N and full C/I/A high; scope unchanged absent evidence of cross-system impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 21:41 vuln.today

CVE Published

Aug 13, 2026 - 20:39 nvd

CRITICAL 9.8

DescriptionCVE.org

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.

AnalysisAI

Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 allows an attacker to run arbitrary code by abusing improper control of file paths (CWE-73). The flaw is reachable over the network without authentication or user interaction per the vendor-assigned CVSS 9.8 vector, giving an attacker full read/write/execution impact on the host. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.

Technical ContextAI

IBM Documentation Offline is a locally deployable package that serves IBM product documentation without internet access. The root cause is CWE-73 (External Control of Filename or Path): the application uses attacker-influenced input to build a file path without proper validation, which can lead to reading, writing, or executing files outside intended boundaries and ultimately arbitrary code execution. The affected component is identified by CPE cpe:2.3:a:ibm:documentation_offline covering all releases in the 1.0.0-1.4.1 range. The specific parameter or endpoint carrying the tainted path is not disclosed in the available data.

RemediationAI

Patch available per vendor advisory: upgrade IBM Documentation Offline to the fixed release identified in IBM's security bulletin at https://www.ibm.com/support/pages/node/7283484 (an exact fixed version number is not included in the available data and should be confirmed from that advisory before deployment). Until the update is applied, reduce exposure by restricting network access to the Documentation Offline service - for example, place it behind authenticated reverse-proxy access or firewall rules that limit it to trusted internal hosts, and remove any internet-facing exposure - accepting that this may block legitimate users who rely on remote access to the documentation portal. Because the root cause is path handling (CWE-73), also review filesystem permissions on the service account to limit the blast radius of any successful path-traversal or file-write attempt.