https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:49.360001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277880 EUVD-2026-277880 2026-10-02T19:39:49.363957+00:00 EUVD-2026-277880 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33205 fkie_cve-2026-33205 2026-10-02T19:39:49.363988+00:00

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitrary URLs and exfiltrate information out from the ebook sandbox. Version 9.6.0 patches the issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10587-1 openSUSE-SU-2026:10587-1 — calibre-9.7.0-1.1 on GA media 2026-10-02T19:39:49.364021+00:00

calibre-9.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33205 UBUNTU-CVE-2026-33205 2026-10-02T19:39:49.364045+00:00

Affected: Ubuntu:16.04:LTS: calibre, Ubuntu:18.04:LTS: calibre, Ubuntu:20.04:LTS: calibre, Ubuntu:22.04:LTS: calibre, Ubuntu:24.04:LTS: calibre, Ubuntu:25.10: calibre, Ubuntu:26.04:LTS: calibre

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitrary URLs and exfiltrate information out from the ebook sandbox. Version 9.6.0 patches the issue.