CVE-2026-16713 describes a vulnerability in IBM Documentation Offline where the server binds to an unrestricted IP address, potentially exposing sensitive information to remote attackers. This misconfiguration allows unauthorized remote access to the documentation server. The vulnerability affects version 1.0.0 of the product. The CVSS 3.1 vector indicates the attack vector is adjacent network (AV:A), with low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and impacts confidentiality only (C:L), with no impact on integrity or availability.

A remote attacker on an adjacent network could exploit this vulnerability to obtain sensitive information from the IBM Documentation Offline server due to the server binding to an unrestricted IP address. The impact is limited to confidentiality loss without affecting integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the documentation server to trusted hosts only and avoid exposing it to untrusted networks.