Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N N U L N N 5.3 .0025 16.9 —
AFFECTED
Product Versions Fixed
Documentation Offline 1.0.0 – —
TIMELINE
Jul 23 Reserved by ibm
Aug 13 Published (CNA: ibm)
Aug 17 RESCORED — CVE-2026-16713 (IBM Documentation Offline). CVSS 4.3 → 5.3 (NVD).
Description
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| July 23, 2026 | Reserved | Reserved by ibm |
| August 13, 2026 | Published | Published (CNA: ibm) |
| August 17, 2026 | RESCORED | RESCORED — CVE-2026-16713 (IBM Documentation Offline). CVSS 4.3 → 5.3 (NVD). |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| IBM | Documentation Offline | — | 1.0.0 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-16713 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.