{"id":"CVE-2021-39826","aliases":["EUVD-2021-26183","GHSA-42gw-xghc-5vpq"],"status":"published","title":"Adobe Digital Editions Command Execution Vulnerability","description":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.02069,"percentile":0.81674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2021-09-27T15:42:17Z","modified":"2026-06-17T04:04:14Z","products":[{"vendor":"adobe","product":"digital editions"},{"vendor":"adobe","product":"digital_editions"}],"references":[{"url":"https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39826"},{"url":"https://github.com/advisories/GHSA-42gw-xghc-5vpq"}],"sources":{"cve":[{"id":"CVE-2021-39826","title":"Adobe Digital Editions Command Execution Vulnerability","description":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.","status":"published","published":"2021-09-27T15:42:17.137Z","modified":"2024-09-17T01:16:02.309Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:33:09.540052Z"}],"euvd":[{"id":"EUVD-2021-26183","description":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.","status":"published","published":"2021-09-27T15:42:17Z","modified":"2024-09-17T01:16:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:51.310992Z"}],"ghsa":[{"id":"GHSA-42gw-xghc-5vpq","title":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution...","description":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.","status":"published","published":"2022-05-24T19:15:47Z","modified":"2023-01-30T05:02:29Z","cwes":["CWE-78"],"updated_at":"2026-11-02T14:46:38.945282Z"}],"nvd":[{"id":"CVE-2021-39826","description":"Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.","status":"published","published":"2021-09-27T16:15:10.13Z","modified":"2026-06-17T04:04:14.43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:58.933037Z"}]}}