Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

Vendor: Calibre Clear all filters
TI-2026-25627 CVE-2026-33206

calibre has a path traversal vulnerability

Priority HIGH 69

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 4.0HIGH 8.2 Local No auth User interaction EPSS 0.00216 Published 2026-03-27 Fixed in 9.6.0 CWE-23
TI-2026-22163 CVE-2026-27810

calibre Vulnerable to HTTP Response Header Injection

Priority MEDIUM 62

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00242 Published 2026-02-27 Fixed in 9.4.0 CWE-113
TI-2024-06504 CVE-2024-7009 · GHSA-mc4x-r58f-6h93

Calibre SQL Injection

Priority MEDIUM 64

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.13922 Published 2024-08-06 No fix listed CWE-89
TI-2024-06503 CVE-2024-7008 · GHSA-5q8g-5hhx-x3c8

Calibre Reflected Cross-Site Scripting (XSS)

Priority MEDIUM 60

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.25607 Published 2024-08-06 No fix listed CWE-79
TI-2024-06285 CVE-2024-6782 · GHSA-g8v6-86f6-jj9q

Calibre Remote Code Execution

Priority CRITICAL 90

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84116 Published 2024-08-06 No fix listed CWE-863
TI-2024-06284 CVE-2024-6781 · GHSA-p89v-3g23-m6q2

Calibre Arbitrary File Read

Priority HIGH 74

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.62442 Published 2024-08-06 No fix listed CWE-22
TI-2011-03643 CVE-2011-4126 · GHSA-m85p-c5xr-7h82

Time-of-check time-of-use race condition in Calibre

Priority LOW 38

Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01539 Published 2021-10-27 No fix listed CWE-367
TI-2011-03642 CVE-2011-4125 · GHSA-m2cr-mfg2-6hxg

Untrusted search path in Calibre

Priority MEDIUM 46

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02308 Published 2021-10-27 No fix listed CWE-426
TI-2011-03641 CVE-2011-4124 · GHSA-989w-w345-v363

Improper input validation in Calibre

Priority MEDIUM 46

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02308 Published 2021-10-27 No fix listed CWE-20