CVE-2026-17481: IBM Documentation Offline Code Execution
CVE-2026-17481 is a high severity flaw in IBM Documentation Offline 1.0.0 to 1.4.1 that may allow code execution. Install release 1.5.1 as IBM advises.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-17481 is a high severity flaw in IBM Documentation Offline 1.0.0 to 1.4.1 that may allow code execution. Install release 1.5.1 as IBM advises.
CVE-2026-17436 is a high severity heap-based overflow in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 reachable from an adjacent network. Apply IBM fixes.
CVE-2026-17423 is a high severity out-of-bounds read in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 that can leak data and crash systems. Apply fixes.
CVE-2026-1740 is an improper authentication flaw in the ipTIME A8004T router firmware 14.18.2 with a public exploit and no vendor reply. Limit access.
CVE-2026-17351 lets the pgAdmin 4 AI Assistant run write statements through a parser mismatch (9.13 to before 9.17). Upgrade to pgAdmin 4 9.17 or later.
CVE-2026-17276 is a critical privilege escalation in IBM i 7.3 to 7.6 via high-authority thread handling. Apply the 5770-SS1 Option 3 PTF for your release.
CVE-2026-17207 is a medium severity buffer overflow in IBM i NFS that can cause denial of service and affect integrity. Apply the PTF for 7.3 to 7.6.
CVE-2026-17206 is a high severity buffer overflow in IBM i Host Servers that may allow remote code execution. Apply the IBM PTF for 7.3 to 7.6 and test.
CVE-2026-17197 is a high severity flaw in IBM i Host Servers that trusts client-asserted identity. Apply the PTFs for 7.3 to 7.6 and the QFileSvr.400 fix.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.