CVE-2026-17482 is a critical vulnerability in IBM Documentation Offline versions 1.0.0 through 1.4.1. It involves CWE-73, External Control of File Name or Path, which can lead to arbitrary code execution due to improper handling of file paths. The vulnerability is remotely exploitable without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact includes full confidentiality, integrity, and availability compromise. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code on affected systems, leading to complete compromise of confidentiality, integrity, and availability of the IBM Documentation Offline application and potentially the underlying system. This represents a critical security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity related to file path handling. Avoid exposing the vulnerable versions to untrusted networks.