https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:03:21.406494+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277801 EUVD-2026-277801 2026-10-03T05:03:21.479129+00:00 EUVD-2026-277801 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33206 fkie_cve-2026-33206 2026-10-03T05:03:21.479172+00:00

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10587-1 openSUSE-SU-2026:10587-1 — calibre-9.7.0-1.1 on GA media 2026-10-03T05:03:21.479212+00:00

calibre-9.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33206 UBUNTU-CVE-2026-33206 2026-10-03T05:03:21.479276+00:00

Affected: Ubuntu:16.04:LTS: calibre, Ubuntu:18.04:LTS: calibre, Ubuntu:20.04:LTS: calibre, Ubuntu:22.04:LTS: calibre, Ubuntu:24.04:LTS: calibre, Ubuntu:25.10: calibre, Ubuntu:26.04:LTS: calibre

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.