calibre vulnerabilities (Ubuntu)

23 vulnerabilities.

• calibre Ubuntu calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification CVE-2026-73249 Fix available 7.5 HighAugust 11, 2026
• calibre Ubuntu calibre: Bypass of Python template restrictions via nested `template()` leading to RCE CVE-2026-73248 Fix available 8.5 HighAugust 11, 2026
• calibre Ubuntu calibre: Arbitrary Code Execution in Template Formatter via Book Metadata CVE-2026-53511 Fix available 8.5 HighJune 27, 2026
• calibre Ubuntu calibre has a path traversal vulnerability CVE-2026-33206 Fix available 8.2 HighMarch 27, 2026
• calibre Ubuntu calibre has Server-Side Request Forgery in ebook viewer backend CVE-2026-33205 Fix available 4.8 MediumMarch 27, 2026
• calibre Ubuntu calibre has a Path Traversal Leading to Arbitrary File Write CVE-2026-30853 Fix available 5.0 MediumMarch 13, 2026
• calibre Ubuntu calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing CVE-2026-27824 Fix available 5.3 MediumFebruary 27, 2026
• calibre Ubuntu calibre Vulnerable to HTTP Response Header Injection CVE-2026-27810 Fix available 6.4 MediumFebruary 27, 2026
• calibre Ubuntu calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution CVE-2026-26065 Fix available 9.3 CriticalFebruary 20, 2026
• calibre Ubuntu calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution CVE-2026-26064 Fix available 9.3 CriticalFebruary 20, 2026
• calibre Ubuntu Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export CVE-2026-25731 Public exploitFix available 7.8 HighFebruary 6, 2026
• calibre Ubuntu calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution CVE-2026-25635 Fix available 8.6 HighFebruary 6, 2026
• calibre Ubuntu calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution CVE-2026-25636 Fix available 8.2 HighFebruary 6, 2026
• calibre Ubuntu calibre is vulnerable to arbitrary code execution when opening FB2 files CVE-2025-64486 Fix available 9.3 CriticalNovember 7, 2025
• calibre Ubuntu Calibre SQL Injection CVE-2024-7009 Fix available EPSS 13.9% 4.2 MediumAugust 6, 2024
• calibre Ubuntu Calibre Reflected Cross-Site Scripting (XSS) CVE-2024-7008 Fix available EPSS 25.6% 5.4 MediumAugust 6, 2024
• calibre Ubuntu Calibre Remote Code Execution CVE-2024-6782 Public exploitFix available EPSS 84.1% 9.8 CriticalAugust 6, 2024
• calibre Ubuntu Calibre Arbitrary File Read CVE-2024-6781 Fix available EPSS 62.4% 7.5 HighAugust 6, 2024
• calibre Ubuntu link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by... CVE-2023-46303 Fix available 7.5 HighOctober 22, 2023
• calibre Ubuntu calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular... CVE-2021-44686 Fix available 7.5 HighDecember 6, 2021
• calibre Ubuntu Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. CVE-2019-16707 Fix available 6.5 MediumSeptember 23, 2019
• calibre Ubuntu gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data,... CVE-2018-7889 Fix available 7.8 HighMarch 8, 2018
• calibre Ubuntu The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a... CVE-2016-10187 Fix available 5.5 MediumFebruary 11, 2017