CVE-2026-16713 affects IBM Documentation Offline versions 1.0.0 through 1.4.1. The issue arises from the documentation server binding to an unrestricted IP address, which constitutes a security misconfiguration (CWE-1327). This allows remote attackers to potentially access sensitive information from the documentation server. The vulnerability has a CVSS 3.1 score of 4.3, reflecting a medium impact primarily on confidentiality. There is no evidence of known exploits in the wild, and no vendor advisory or patch has been published yet.

A remote attacker could obtain sensitive information due to the server binding to an unrestricted IP address. The impact is limited to confidentiality loss without integrity or availability effects. The attack vector is adjacent network (AV:A), requiring low attack complexity and no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and restrict the IP addresses to which the documentation server binds to prevent unauthorized remote access.