CVE-2026-25636
High · 8.2CVSS
8.2
EPSS
0.2%
Published
Feb 6, 2026
CISA due date
—
The record
calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to an absolute filesystem path and opens it in read-write mode, even when it points outside the conversion extraction directory. This vulnerability is fixed in 9.2.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | calibre | 0 | 9.7.0-1.1 |
Related vulnerabilities
- CVE-2026-53511 calibre is an e-book manager. Also affects calibre
- CVE-2026-33205 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-33206 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-30853 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-27810 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-27824 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-26065 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre
- CVE-2026-26064 calibre is a cross-platform e-book manager for viewing, converting, editing, and… Also affects calibre