koodo-reader

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

koodo-reader records in CISA KEV

No koodo-reader vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-39978 CVE-2026-55408

Koodo Reader: Remote code execution via malicious epub file

HIGH 72

Koodo Reader is an ebook reader.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00246 Published 2026-07-07 Fixed in 2.3.1 CWE-94

TI-2026-84350 CVE-2026-121544 · GHSA-xh68-jpqj-pv76

Path traversal in Koodo Reader OPDS handlers exposes server files

MEDIUM 64

Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00637 Published 2026-11-03 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0