https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:02:46.330122+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04348 bdu:2026-04348 2026-10-03T09:02:46.406134+00:00 bdu:2026-04348 https://cve.radiocsirt.org/vuln/euvd-2026-269068 EUVD-2026-269068 2026-10-03T09:02:46.406171+00:00 EUVD-2026-269068 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26065 fkie_cve-2026-26065 2026-10-03T09:02:46.406185+00:00

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-byte and 202-byte header variants) that allow arbitrary file writes with arbitrary extension and arbitrary content anywhere the user has write permissions. Files are written in 'wb' mode, silently overwriting existing files. This can lead to potential code execution and Denial of Service through file corruption. This issue has been fixed in version 9.3.0.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10587-1 openSUSE-SU-2026:10587-1 — calibre-9.7.0-1.1 on GA media 2026-10-03T09:02:46.406217+00:00

calibre-9.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-26065 UBUNTU-CVE-2026-26065 2026-10-03T09:02:46.406240+00:00

Affected: Ubuntu:16.04:LTS: calibre, Ubuntu:18.04:LTS: calibre, Ubuntu:20.04:LTS: calibre, Ubuntu:22.04:LTS: calibre, Ubuntu:24.04:LTS: calibre, Ubuntu:25.10: calibre, Ubuntu:26.04:LTS: calibre

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-byte and 202-byte header variants) that allow arbitrary file writes with arbitrary extension and arbitrary content anywhere the user has write permissions. Files are written in 'wb' mode, silently overwriting existing files. This can lead to potential code execution and Denial of Service through file corruption. This issue has been fixed in version 9.3.0.